index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aglomerat-kassa.ru" OR destinationhostname CONTAINS "circospb.ru" OR destinationhostname CONTAINS "fcarsenal-tickets.ru" OR destinationhostname CONTAINS "fcrostov-kassa.ru" OR destinationhostname CONTAINS "fxxc-tickets.ru" OR destinationhostname CONTAINS "hcmetallurg-tickets.com" OR destinationhostname CONTAINS "vaenga-kassa.com" OR destinationhostname CONTAINS "edsheeran-tour.com" OR destinationhostname CONTAINS "baikalfest.com" OR destinationhostname CONTAINS "circus-krasnodar.com" OR destinationhostname CONTAINS "ckz-krasnodar.com" OR destinationhostname CONTAINS "coinrest-afisha.com" OR destinationhostname CONTAINS "fc-loko.ru" OR destinationhostname CONTAINS "gorkypark-ticket.ru" OR destinationhostname CONTAINS "kvndom.ru" OR destinationhostname CONTAINS "mhgtheatre.ru" OR destinationhostname CONTAINS "moskvarium.com.ru" OR destinationhostname CONTAINS "sibirarena-kassa.com" OR destinationhostname CONTAINS "sound.spb.ru" OR destinationhostname CONTAINS "summerfestsochi.com" OR destinationhostname CONTAINS "technic-tickets.ru" OR destinationhostname CONTAINS "ticket-boxing.com" OR destinationhostname CONTAINS "tickets-jony.com" OR destinationhostname CONTAINS "tickets-paris24.com" OR destinationhostname CONTAINS "vtb-league-tickets.com" OR destinationhostname CONTAINS "zemfiraru.com" OR destinationhostname CONTAINS "afisha-hammalinavai.ru" OR destinationhostname CONTAINS "dimash-concert.com" OR destinationhostname CONTAINS "dynamo-fc-moscow.ru" OR destinationhostname CONTAINS "hc-barys.com" OR destinationhostname CONTAINS "igoryantest.ru" OR destinationhostname CONTAINS "megasport-kassa.ru" OR destinationhostname CONTAINS "russia-basket.com" OR destinationhostname CONTAINS "ticket-fcz.spb.ru" OR destinationhostname CONTAINS "zivert.kg" OR destinationhostname CONTAINS "1tv-cup.ru" OR destinationhostname CONTAINS "bolshoi-kassa.com" OR destinationhostname CONTAINS "ledovoe-show.ru" OR destinationhostname CONTAINS "mdm-palace.ru" OR destinationhostname CONTAINS "scriptonit-tickets.com" OR destinationhostname CONTAINS "tickets-euro2024.com" OR destinationhostname CONTAINS "bastaconcert.site" OR destinationhostname CONTAINS "afishaclub.spb.ru" OR destinationhostname CONTAINS "afisha-clubja.ru" OR destinationhostname CONTAINS "afisha-karena.ru" OR destinationhostname CONTAINS "afisha-tmhconcert.ru" OR destinationhostname CONTAINS "dgtuhall-afisha.ru" OR destinationhostname CONTAINS "kolbasnyytsekh.ru" OR destinationhostname CONTAINS "komtheatre-afisha.site" OR destinationhostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aglomerat-kassa.ru" OR sourcentdomain CONTAINS "circospb.ru" OR sourcentdomain CONTAINS "fcarsenal-tickets.ru" OR sourcentdomain CONTAINS "fcrostov-kassa.ru" OR sourcentdomain CONTAINS "fxxc-tickets.ru" OR sourcentdomain CONTAINS "hcmetallurg-tickets.com" OR sourcentdomain CONTAINS "vaenga-kassa.com" OR sourcentdomain CONTAINS "edsheeran-tour.com" OR sourcentdomain CONTAINS "baikalfest.com" OR sourcentdomain CONTAINS "circus-krasnodar.com" OR sourcentdomain CONTAINS "ckz-krasnodar.com" OR sourcentdomain CONTAINS "coinrest-afisha.com" OR sourcentdomain CONTAINS "fc-loko.ru" OR sourcentdomain CONTAINS "gorkypark-ticket.ru" OR sourcentdomain CONTAINS "kvndom.ru" OR sourcentdomain CONTAINS "mhgtheatre.ru" OR sourcentdomain CONTAINS "moskvarium.com.ru" OR sourcentdomain CONTAINS "sibirarena-kassa.com" OR sourcentdomain CONTAINS "sound.spb.ru" OR sourcentdomain CONTAINS "summerfestsochi.com" OR sourcentdomain CONTAINS "technic-tickets.ru" OR sourcentdomain CONTAINS "ticket-boxing.com" OR sourcentdomain CONTAINS "tickets-jony.com" OR sourcentdomain CONTAINS "tickets-paris24.com" OR sourcentdomain CONTAINS "vtb-league-tickets.com" OR sourcentdomain CONTAINS "zemfiraru.com" OR sourcentdomain CONTAINS "afisha-hammalinavai.ru" OR sourcentdomain CONTAINS "dimash-concert.com" OR sourcentdomain CONTAINS "dynamo-fc-moscow.ru" OR sourcentdomain CONTAINS "hc-barys.com" OR sourcentdomain CONTAINS "igoryantest.ru" OR sourcentdomain CONTAINS "megasport-kassa.ru" OR sourcentdomain CONTAINS "russia-basket.com" OR sourcentdomain CONTAINS "ticket-fcz.spb.ru" OR sourcentdomain CONTAINS "zivert.kg" OR sourcentdomain CONTAINS "1tv-cup.ru" OR sourcentdomain CONTAINS "bolshoi-kassa.com" OR sourcentdomain CONTAINS "ledovoe-show.ru" OR sourcentdomain CONTAINS "mdm-palace.ru" OR sourcentdomain CONTAINS "scriptonit-tickets.com" OR sourcentdomain CONTAINS "tickets-euro2024.com" OR sourcentdomain CONTAINS "bastaconcert.site" OR sourcentdomain CONTAINS "afishaclub.spb.ru" OR sourcentdomain CONTAINS "afisha-clubja.ru" OR sourcentdomain CONTAINS "afisha-karena.ru" OR sourcentdomain CONTAINS "afisha-tmhconcert.ru" OR sourcentdomain CONTAINS "dgtuhall-afisha.ru" OR sourcentdomain CONTAINS "kolbasnyytsekh.ru" OR sourcentdomain CONTAINS "komtheatre-afisha.site" OR sourcentdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aglomerat-kassa.ru" OR sourcehostname CONTAINS "circospb.ru" OR sourcehostname CONTAINS "fcarsenal-tickets.ru" OR sourcehostname CONTAINS "fcrostov-kassa.ru" OR sourcehostname CONTAINS "fxxc-tickets.ru" OR sourcehostname CONTAINS "hcmetallurg-tickets.com" OR sourcehostname CONTAINS "vaenga-kassa.com" OR sourcehostname CONTAINS "edsheeran-tour.com" OR sourcehostname CONTAINS "baikalfest.com" OR sourcehostname CONTAINS "circus-krasnodar.com" OR sourcehostname CONTAINS "ckz-krasnodar.com" OR sourcehostname CONTAINS "coinrest-afisha.com" OR sourcehostname CONTAINS "fc-loko.ru" OR sourcehostname CONTAINS "gorkypark-ticket.ru" OR sourcehostname CONTAINS "kvndom.ru" OR sourcehostname CONTAINS "mhgtheatre.ru" OR sourcehostname CONTAINS "moskvarium.com.ru" OR sourcehostname CONTAINS "sibirarena-kassa.com" OR sourcehostname CONTAINS "sound.spb.ru" OR sourcehostname CONTAINS "summerfestsochi.com" OR sourcehostname CONTAINS "technic-tickets.ru" OR sourcehostname CONTAINS "ticket-boxing.com" OR sourcehostname CONTAINS "tickets-jony.com" OR sourcehostname CONTAINS "tickets-paris24.com" OR sourcehostname CONTAINS "vtb-league-tickets.com" OR sourcehostname CONTAINS "zemfiraru.com" OR sourcehostname CONTAINS "afisha-hammalinavai.ru" OR sourcehostname CONTAINS "dimash-concert.com" OR sourcehostname CONTAINS "dynamo-fc-moscow.ru" OR sourcehostname CONTAINS "hc-barys.com" OR sourcehostname CONTAINS "igoryantest.ru" OR sourcehostname CONTAINS "megasport-kassa.ru" OR sourcehostname CONTAINS "russia-basket.com" OR sourcehostname CONTAINS "ticket-fcz.spb.ru" OR sourcehostname CONTAINS "zivert.kg" OR sourcehostname CONTAINS "1tv-cup.ru" OR sourcehostname CONTAINS "bolshoi-kassa.com" OR sourcehostname CONTAINS "ledovoe-show.ru" OR sourcehostname CONTAINS "mdm-palace.ru" OR sourcehostname CONTAINS "scriptonit-tickets.com" OR sourcehostname CONTAINS "tickets-euro2024.com" OR sourcehostname CONTAINS "bastaconcert.site" OR sourcehostname CONTAINS "afishaclub.spb.ru" OR sourcehostname CONTAINS "afisha-clubja.ru" OR sourcehostname CONTAINS "afisha-karena.ru" OR sourcehostname CONTAINS "afisha-tmhconcert.ru" OR sourcehostname CONTAINS "dgtuhall-afisha.ru" OR sourcehostname CONTAINS "kolbasnyytsekh.ru" OR sourcehostname CONTAINS "komtheatre-afisha.site" OR sourcehostname CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aglomerat-kassa.ru" OR destinationntdomain CONTAINS "circospb.ru" OR destinationntdomain CONTAINS "fcarsenal-tickets.ru" OR destinationntdomain CONTAINS "fcrostov-kassa.ru" OR destinationntdomain CONTAINS "fxxc-tickets.ru" OR destinationntdomain CONTAINS "hcmetallurg-tickets.com" OR destinationntdomain CONTAINS "vaenga-kassa.com" OR destinationntdomain CONTAINS "edsheeran-tour.com" OR destinationntdomain CONTAINS "baikalfest.com" OR destinationntdomain CONTAINS "circus-krasnodar.com" OR destinationntdomain CONTAINS "ckz-krasnodar.com" OR destinationntdomain CONTAINS "coinrest-afisha.com" OR destinationntdomain CONTAINS "fc-loko.ru" OR destinationntdomain CONTAINS "gorkypark-ticket.ru" OR destinationntdomain CONTAINS "kvndom.ru" OR destinationntdomain CONTAINS "mhgtheatre.ru" OR destinationntdomain CONTAINS "moskvarium.com.ru" OR destinationntdomain CONTAINS "sibirarena-kassa.com" OR destinationntdomain CONTAINS "sound.spb.ru" OR destinationntdomain CONTAINS "summerfestsochi.com" OR destinationntdomain CONTAINS "technic-tickets.ru" OR destinationntdomain CONTAINS "ticket-boxing.com" OR destinationntdomain CONTAINS "tickets-jony.com" OR destinationntdomain CONTAINS "tickets-paris24.com" OR destinationntdomain CONTAINS "vtb-league-tickets.com" OR destinationntdomain CONTAINS "zemfiraru.com" OR destinationntdomain CONTAINS "afisha-hammalinavai.ru" OR destinationntdomain CONTAINS "dimash-concert.com" OR destinationntdomain CONTAINS "dynamo-fc-moscow.ru" OR destinationntdomain CONTAINS "hc-barys.com" OR destinationntdomain CONTAINS "igoryantest.ru" OR destinationntdomain CONTAINS "megasport-kassa.ru" OR destinationntdomain CONTAINS "russia-basket.com" OR destinationntdomain CONTAINS "ticket-fcz.spb.ru" OR destinationntdomain CONTAINS "zivert.kg" OR destinationntdomain CONTAINS "1tv-cup.ru" OR destinationntdomain CONTAINS "bolshoi-kassa.com" OR destinationntdomain CONTAINS "ledovoe-show.ru" OR destinationntdomain CONTAINS "mdm-palace.ru" OR destinationntdomain CONTAINS "scriptonit-tickets.com" OR destinationntdomain CONTAINS "tickets-euro2024.com" OR destinationntdomain CONTAINS "bastaconcert.site" OR destinationntdomain CONTAINS "afishaclub.spb.ru" OR destinationntdomain CONTAINS "afisha-clubja.ru" OR destinationntdomain CONTAINS "afisha-karena.ru" OR destinationntdomain CONTAINS "afisha-tmhconcert.ru" OR destinationntdomain CONTAINS "dgtuhall-afisha.ru" OR destinationntdomain CONTAINS "kolbasnyytsekh.ru" OR destinationntdomain CONTAINS "komtheatre-afisha.site" OR destinationntdomain CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "aglomerat-kassa.ru" OR requesturl CONTAINS "circospb.ru" OR requesturl CONTAINS "fcarsenal-tickets.ru" OR requesturl CONTAINS "fcrostov-kassa.ru" OR requesturl CONTAINS "fxxc-tickets.ru" OR requesturl CONTAINS "hcmetallurg-tickets.com" OR requesturl CONTAINS "vaenga-kassa.com" OR requesturl CONTAINS "edsheeran-tour.com" OR requesturl CONTAINS "baikalfest.com" OR requesturl CONTAINS "circus-krasnodar.com" OR requesturl CONTAINS "ckz-krasnodar.com" OR requesturl CONTAINS "coinrest-afisha.com" OR requesturl CONTAINS "fc-loko.ru" OR requesturl CONTAINS "gorkypark-ticket.ru" OR requesturl CONTAINS "kvndom.ru" OR requesturl CONTAINS "mhgtheatre.ru" OR requesturl CONTAINS "moskvarium.com.ru" OR requesturl CONTAINS "sibirarena-kassa.com" OR requesturl CONTAINS "sound.spb.ru" OR requesturl CONTAINS "summerfestsochi.com" OR requesturl CONTAINS "technic-tickets.ru" OR requesturl CONTAINS "ticket-boxing.com" OR requesturl CONTAINS "tickets-jony.com" OR requesturl CONTAINS "tickets-paris24.com" OR requesturl CONTAINS "vtb-league-tickets.com" OR requesturl CONTAINS "zemfiraru.com" OR requesturl CONTAINS "afisha-hammalinavai.ru" OR requesturl CONTAINS "dimash-concert.com" OR requesturl CONTAINS "dynamo-fc-moscow.ru" OR requesturl CONTAINS "hc-barys.com" OR requesturl CONTAINS "igoryantest.ru" OR requesturl CONTAINS "megasport-kassa.ru" OR requesturl CONTAINS "russia-basket.com" OR requesturl CONTAINS "ticket-fcz.spb.ru" OR requesturl CONTAINS "zivert.kg" OR requesturl CONTAINS "1tv-cup.ru" OR requesturl CONTAINS "bolshoi-kassa.com" OR requesturl CONTAINS "ledovoe-show.ru" OR requesturl CONTAINS "mdm-palace.ru" OR requesturl CONTAINS "scriptonit-tickets.com" OR requesturl CONTAINS "tickets-euro2024.com" OR requesturl CONTAINS "bastaconcert.site" OR requesturl CONTAINS "afishaclub.spb.ru" OR requesturl CONTAINS "afisha-clubja.ru" OR requesturl CONTAINS "afisha-karena.ru" OR requesturl CONTAINS "afisha-tmhconcert.ru" OR requesturl CONTAINS "dgtuhall-afisha.ru" OR requesturl CONTAINS "kolbasnyytsekh.ru" OR requesturl CONTAINS "komtheatre-afisha.site" OR requesturl CONTAINS "kremlin-kassa.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sevkaport-afisha.site" OR destinationhostname CONTAINS "snowshow-afisha.site" OR destinationhostname CONTAINS "sochi-hokkey.ru" OR destinationhostname CONTAINS "teatrsats.ru" OR destinationhostname CONTAINS "tractor-hokkey.ru" OR destinationhostname CONTAINS "xk-cska.ru" OR destinationhostname CONTAINS "yantar-kassa.com" OR destinationhostname CONTAINS "afisha-fest.ru" OR destinationhostname CONTAINS "all-widget.com" OR destinationhostname CONTAINS "bandyhockey.ru" OR destinationhostname CONTAINS "kznn-upiter.ru" OR destinationhostname CONTAINS "mumii-troll.ru" OR destinationhostname CONTAINS "satirikon-kassa.ru" OR destinationhostname CONTAINS "avangard-tickets.ru" OR destinationhostname CONTAINS "bts-tickets.ru" OR destinationhostname CONTAINS "etihad-arena.com" OR destinationhostname CONTAINS "fcufa-kassa.ru" OR destinationhostname CONTAINS "tatarena.com" OR destinationhostname CONTAINS "zhara-festival.com" OR destinationhostname CONTAINS "arena-ska.com" OR destinationhostname CONTAINS "dance-open.com" OR destinationhostname CONTAINS "fc-alania.com" OR destinationhostname CONTAINS "spartak-alania.com" OR destinationhostname CONTAINS "kz-moscow.ru" OR destinationhostname CONTAINS "udurova.com" OR destinationhostname CONTAINS "adrenaline-kassa.ru" OR destinationhostname CONTAINS "afishacomedy.ru" OR destinationhostname CONTAINS "basta-tickets.ru" OR destinationhostname CONTAINS "cosmonavt-tickets.ru" OR destinationhostname CONTAINS "gymnastics-tickets.ru" OR destinationhostname CONTAINS "music-live-hall.ru" OR destinationhostname CONTAINS "redarena-kassa.com" OR destinationhostname CONTAINS "afisha-vokzal.ru" OR destinationhostname CONTAINS "balet-schelkunchik.ru" OR destinationhostname CONTAINS "bcz-kassa.ru" OR destinationhostname CONTAINS "chaikovskogo-ticket.ru" OR destinationhostname CONTAINS "etheatreballet.ru" OR destinationhostname CONTAINS "feyerverk-fest.ru" OR destinationhostname CONTAINS "hermtheatre.ru" OR destinationhostname CONTAINS "imaginedragons-tickets.ru" OR destinationhostname CONTAINS "krocus-hall.ru" OR destinationhostname CONTAINS "megasport-afisha.ru" OR destinationhostname CONTAINS "olimpark-kassa.com" OR destinationhostname CONTAINS "stanmus.com.ru" OR destinationhostname CONTAINS "tickets-depechemode.com" OR destinationhostname CONTAINS "tickets-fcrnd.ru" OR destinationhostname CONTAINS "yuri-antonov.ru" OR destinationhostname CONTAINS "afishabaltheatre.com" OR destinationhostname CONTAINS "afishapiknik.com" OR destinationhostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sevkaport-afisha.site" OR sourcentdomain CONTAINS "snowshow-afisha.site" OR sourcentdomain CONTAINS "sochi-hokkey.ru" OR sourcentdomain CONTAINS "teatrsats.ru" OR sourcentdomain CONTAINS "tractor-hokkey.ru" OR sourcentdomain CONTAINS "xk-cska.ru" OR sourcentdomain CONTAINS "yantar-kassa.com" OR sourcentdomain CONTAINS "afisha-fest.ru" OR sourcentdomain CONTAINS "all-widget.com" OR sourcentdomain CONTAINS "bandyhockey.ru" OR sourcentdomain CONTAINS "kznn-upiter.ru" OR sourcentdomain CONTAINS "mumii-troll.ru" OR sourcentdomain CONTAINS "satirikon-kassa.ru" OR sourcentdomain CONTAINS "avangard-tickets.ru" OR sourcentdomain CONTAINS "bts-tickets.ru" OR sourcentdomain CONTAINS "etihad-arena.com" OR sourcentdomain CONTAINS "fcufa-kassa.ru" OR sourcentdomain CONTAINS "tatarena.com" OR sourcentdomain CONTAINS "zhara-festival.com" OR sourcentdomain CONTAINS "arena-ska.com" OR sourcentdomain CONTAINS "dance-open.com" OR sourcentdomain CONTAINS "fc-alania.com" OR sourcentdomain CONTAINS "spartak-alania.com" OR sourcentdomain CONTAINS "kz-moscow.ru" OR sourcentdomain CONTAINS "udurova.com" OR sourcentdomain CONTAINS "adrenaline-kassa.ru" OR sourcentdomain CONTAINS "afishacomedy.ru" OR sourcentdomain CONTAINS "basta-tickets.ru" OR sourcentdomain CONTAINS "cosmonavt-tickets.ru" OR sourcentdomain CONTAINS "gymnastics-tickets.ru" OR sourcentdomain CONTAINS "music-live-hall.ru" OR sourcentdomain CONTAINS "redarena-kassa.com" OR sourcentdomain CONTAINS "afisha-vokzal.ru" OR sourcentdomain CONTAINS "balet-schelkunchik.ru" OR sourcentdomain CONTAINS "bcz-kassa.ru" OR sourcentdomain CONTAINS "chaikovskogo-ticket.ru" OR sourcentdomain CONTAINS "etheatreballet.ru" OR sourcentdomain CONTAINS "feyerverk-fest.ru" OR sourcentdomain CONTAINS "hermtheatre.ru" OR sourcentdomain CONTAINS "imaginedragons-tickets.ru" OR sourcentdomain CONTAINS "krocus-hall.ru" OR sourcentdomain CONTAINS "megasport-afisha.ru" OR sourcentdomain CONTAINS "olimpark-kassa.com" OR sourcentdomain CONTAINS "stanmus.com.ru" OR sourcentdomain CONTAINS "tickets-depechemode.com" OR sourcentdomain CONTAINS "tickets-fcrnd.ru" OR sourcentdomain CONTAINS "yuri-antonov.ru" OR sourcentdomain CONTAINS "afishabaltheatre.com" OR sourcentdomain CONTAINS "afishapiknik.com" OR sourcentdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sevkaport-afisha.site" OR sourcehostname CONTAINS "snowshow-afisha.site" OR sourcehostname CONTAINS "sochi-hokkey.ru" OR sourcehostname CONTAINS "teatrsats.ru" OR sourcehostname CONTAINS "tractor-hokkey.ru" OR sourcehostname CONTAINS "xk-cska.ru" OR sourcehostname CONTAINS "yantar-kassa.com" OR sourcehostname CONTAINS "afisha-fest.ru" OR sourcehostname CONTAINS "all-widget.com" OR sourcehostname CONTAINS "bandyhockey.ru" OR sourcehostname CONTAINS "kznn-upiter.ru" OR sourcehostname CONTAINS "mumii-troll.ru" OR sourcehostname CONTAINS "satirikon-kassa.ru" OR sourcehostname CONTAINS "avangard-tickets.ru" OR sourcehostname CONTAINS "bts-tickets.ru" OR sourcehostname CONTAINS "etihad-arena.com" OR sourcehostname CONTAINS "fcufa-kassa.ru" OR sourcehostname CONTAINS "tatarena.com" OR sourcehostname CONTAINS "zhara-festival.com" OR sourcehostname CONTAINS "arena-ska.com" OR sourcehostname CONTAINS "dance-open.com" OR sourcehostname CONTAINS "fc-alania.com" OR sourcehostname CONTAINS "spartak-alania.com" OR sourcehostname CONTAINS "kz-moscow.ru" OR sourcehostname CONTAINS "udurova.com" OR sourcehostname CONTAINS "adrenaline-kassa.ru" OR sourcehostname CONTAINS "afishacomedy.ru" OR sourcehostname CONTAINS "basta-tickets.ru" OR sourcehostname CONTAINS "cosmonavt-tickets.ru" OR sourcehostname CONTAINS "gymnastics-tickets.ru" OR sourcehostname CONTAINS "music-live-hall.ru" OR sourcehostname CONTAINS "redarena-kassa.com" OR sourcehostname CONTAINS "afisha-vokzal.ru" OR sourcehostname CONTAINS "balet-schelkunchik.ru" OR sourcehostname CONTAINS "bcz-kassa.ru" OR sourcehostname CONTAINS "chaikovskogo-ticket.ru" OR sourcehostname CONTAINS "etheatreballet.ru" OR sourcehostname CONTAINS "feyerverk-fest.ru" OR sourcehostname CONTAINS "hermtheatre.ru" OR sourcehostname CONTAINS "imaginedragons-tickets.ru" OR sourcehostname CONTAINS "krocus-hall.ru" OR sourcehostname CONTAINS "megasport-afisha.ru" OR sourcehostname CONTAINS "olimpark-kassa.com" OR sourcehostname CONTAINS "stanmus.com.ru" OR sourcehostname CONTAINS "tickets-depechemode.com" OR sourcehostname CONTAINS "tickets-fcrnd.ru" OR sourcehostname CONTAINS "yuri-antonov.ru" OR sourcehostname CONTAINS "afishabaltheatre.com" OR sourcehostname CONTAINS "afishapiknik.com" OR sourcehostname CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sevkaport-afisha.site" OR destinationntdomain CONTAINS "snowshow-afisha.site" OR destinationntdomain CONTAINS "sochi-hokkey.ru" OR destinationntdomain CONTAINS "teatrsats.ru" OR destinationntdomain CONTAINS "tractor-hokkey.ru" OR destinationntdomain CONTAINS "xk-cska.ru" OR destinationntdomain CONTAINS "yantar-kassa.com" OR destinationntdomain CONTAINS "afisha-fest.ru" OR destinationntdomain CONTAINS "all-widget.com" OR destinationntdomain CONTAINS "bandyhockey.ru" OR destinationntdomain CONTAINS "kznn-upiter.ru" OR destinationntdomain CONTAINS "mumii-troll.ru" OR destinationntdomain CONTAINS "satirikon-kassa.ru" OR destinationntdomain CONTAINS "avangard-tickets.ru" OR destinationntdomain CONTAINS "bts-tickets.ru" OR destinationntdomain CONTAINS "etihad-arena.com" OR destinationntdomain CONTAINS "fcufa-kassa.ru" OR destinationntdomain CONTAINS "tatarena.com" OR destinationntdomain CONTAINS "zhara-festival.com" OR destinationntdomain CONTAINS "arena-ska.com" OR destinationntdomain CONTAINS "dance-open.com" OR destinationntdomain CONTAINS "fc-alania.com" OR destinationntdomain CONTAINS "spartak-alania.com" OR destinationntdomain CONTAINS "kz-moscow.ru" OR destinationntdomain CONTAINS "udurova.com" OR destinationntdomain CONTAINS "adrenaline-kassa.ru" OR destinationntdomain CONTAINS "afishacomedy.ru" OR destinationntdomain CONTAINS "basta-tickets.ru" OR destinationntdomain CONTAINS "cosmonavt-tickets.ru" OR destinationntdomain CONTAINS "gymnastics-tickets.ru" OR destinationntdomain CONTAINS "music-live-hall.ru" OR destinationntdomain CONTAINS "redarena-kassa.com" OR destinationntdomain CONTAINS "afisha-vokzal.ru" OR destinationntdomain CONTAINS "balet-schelkunchik.ru" OR destinationntdomain CONTAINS "bcz-kassa.ru" OR destinationntdomain CONTAINS "chaikovskogo-ticket.ru" OR destinationntdomain CONTAINS "etheatreballet.ru" OR destinationntdomain CONTAINS "feyerverk-fest.ru" OR destinationntdomain CONTAINS "hermtheatre.ru" OR destinationntdomain CONTAINS "imaginedragons-tickets.ru" OR destinationntdomain CONTAINS "krocus-hall.ru" OR destinationntdomain CONTAINS "megasport-afisha.ru" OR destinationntdomain CONTAINS "olimpark-kassa.com" OR destinationntdomain CONTAINS "stanmus.com.ru" OR destinationntdomain CONTAINS "tickets-depechemode.com" OR destinationntdomain CONTAINS "tickets-fcrnd.ru" OR destinationntdomain CONTAINS "yuri-antonov.ru" OR destinationntdomain CONTAINS "afishabaltheatre.com" OR destinationntdomain CONTAINS "afishapiknik.com" OR destinationntdomain CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "sevkaport-afisha.site" OR requesturl CONTAINS "snowshow-afisha.site" OR requesturl CONTAINS "sochi-hokkey.ru" OR requesturl CONTAINS "teatrsats.ru" OR requesturl CONTAINS "tractor-hokkey.ru" OR requesturl CONTAINS "xk-cska.ru" OR requesturl CONTAINS "yantar-kassa.com" OR requesturl CONTAINS "afisha-fest.ru" OR requesturl CONTAINS "all-widget.com" OR requesturl CONTAINS "bandyhockey.ru" OR requesturl CONTAINS "kznn-upiter.ru" OR requesturl CONTAINS "mumii-troll.ru" OR requesturl CONTAINS "satirikon-kassa.ru" OR requesturl CONTAINS "avangard-tickets.ru" OR requesturl CONTAINS "bts-tickets.ru" OR requesturl CONTAINS "etihad-arena.com" OR requesturl CONTAINS "fcufa-kassa.ru" OR requesturl CONTAINS "tatarena.com" OR requesturl CONTAINS "zhara-festival.com" OR requesturl CONTAINS "arena-ska.com" OR requesturl CONTAINS "dance-open.com" OR requesturl CONTAINS "fc-alania.com" OR requesturl CONTAINS "spartak-alania.com" OR requesturl CONTAINS "kz-moscow.ru" OR requesturl CONTAINS "udurova.com" OR requesturl CONTAINS "adrenaline-kassa.ru" OR requesturl CONTAINS "afishacomedy.ru" OR requesturl CONTAINS "basta-tickets.ru" OR requesturl CONTAINS "cosmonavt-tickets.ru" OR requesturl CONTAINS "gymnastics-tickets.ru" OR requesturl CONTAINS "music-live-hall.ru" OR requesturl CONTAINS "redarena-kassa.com" OR requesturl CONTAINS "afisha-vokzal.ru" OR requesturl CONTAINS "balet-schelkunchik.ru" OR requesturl CONTAINS "bcz-kassa.ru" OR requesturl CONTAINS "chaikovskogo-ticket.ru" OR requesturl CONTAINS "etheatreballet.ru" OR requesturl CONTAINS "feyerverk-fest.ru" OR requesturl CONTAINS "hermtheatre.ru" OR requesturl CONTAINS "imaginedragons-tickets.ru" OR requesturl CONTAINS "krocus-hall.ru" OR requesturl CONTAINS "megasport-afisha.ru" OR requesturl CONTAINS "olimpark-kassa.com" OR requesturl CONTAINS "stanmus.com.ru" OR requesturl CONTAINS "tickets-depechemode.com" OR requesturl CONTAINS "tickets-fcrnd.ru" OR requesturl CONTAINS "yuri-antonov.ru" OR requesturl CONTAINS "afishabaltheatre.com" OR requesturl CONTAINS "afishapiknik.com" OR requesturl CONTAINS "balashiha-icearena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "baseclub-tickets.com" OR destinationhostname CONTAINS "circus-rnd.ru" OR destinationhostname CONTAINS "concertannaasti.com" OR destinationhostname CONTAINS "concertknyazz.com" OR destinationhostname CONTAINS "fs-tickets.ru" OR destinationhostname CONTAINS "kassir.com.ru" OR destinationhostname CONTAINS "kz-cosmos.ru" OR destinationhostname CONTAINS "lenkomafisha.ru" OR destinationhostname CONTAINS "masha-medved.ru" OR destinationhostname CONTAINS "mayakovski-teatr.com" OR destinationhostname CONTAINS "svetlana-zaharova.com" OR destinationhostname CONTAINS "teatrarmy.ru" OR destinationhostname CONTAINS "teatrpushkina.ru" OR destinationhostname CONTAINS "ticket-megasport.ru" OR destinationhostname CONTAINS "ticketoffice.kz" OR destinationhostname CONTAINS "vitez-hockey.com" OR destinationhostname CONTAINS "afisha-afmclub.ru" OR destinationhostname CONTAINS "afisha-ghall.ru" OR destinationhostname CONTAINS "aria-tickets.ru" OR destinationhostname CONTAINS "atp500.ru" OR destinationhostname CONTAINS "basket-khimki.ru" OR destinationhostname CONTAINS "bdva.com.ru" OR destinationhostname CONTAINS "cirque-spb.com" OR destinationhostname CONTAINS "concert.spb.ru" OR destinationhostname CONTAINS "cska-hokkey.ru" OR destinationhostname CONTAINS "dkzelenograd-kassa.com" OR destinationhostname CONTAINS "ed-sheeran.com.ru" OR destinationhostname CONTAINS "embargo-villa.ru" OR destinationhostname CONTAINS "evgeniy-grishkovets.com" OR destinationhostname CONTAINS "fckhimki-tickets.ru" OR destinationhostname CONTAINS "fckrasnodar-kassa.com" OR destinationhostname CONTAINS "glav-club.ru" OR destinationhostname CONTAINS "gogolcentr.ru" OR destinationhostname CONTAINS "gruppa-lube.com" OR destinationhostname CONTAINS "hcakbars.ru" OR destinationhostname CONTAINS "kremlcup.com" OR destinationhostname CONTAINS "kvartet-i-kassa.com" OR destinationhostname CONTAINS "lencom-ticket.ru" OR destinationhostname CONTAINS "lencom-tickets.ru" OR destinationhostname CONTAINS "mht-tickets.ru" OR destinationhostname CONTAINS "myatafest.com" OR destinationhostname CONTAINS "rfs-tickets.com" OR destinationhostname CONTAINS "rosahall-ticket.ru" OR destinationhostname CONTAINS "shelkunchik-bolshoi.com" OR destinationhostname CONTAINS "teatr-mossovet.ru" OR destinationhostname CONTAINS "teatr-operetta.ru" OR destinationhostname CONTAINS "teatr-viktuka.ru" OR destinationhostname CONTAINS "theatre.msk.ru" OR destinationhostname CONTAINS "tickets-concierge.ru" OR destinationhostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "baseclub-tickets.com" OR sourcentdomain CONTAINS "circus-rnd.ru" OR sourcentdomain CONTAINS "concertannaasti.com" OR sourcentdomain CONTAINS "concertknyazz.com" OR sourcentdomain CONTAINS "fs-tickets.ru" OR sourcentdomain CONTAINS "kassir.com.ru" OR sourcentdomain CONTAINS "kz-cosmos.ru" OR sourcentdomain CONTAINS "lenkomafisha.ru" OR sourcentdomain CONTAINS "masha-medved.ru" OR sourcentdomain CONTAINS "mayakovski-teatr.com" OR sourcentdomain CONTAINS "svetlana-zaharova.com" OR sourcentdomain CONTAINS "teatrarmy.ru" OR sourcentdomain CONTAINS "teatrpushkina.ru" OR sourcentdomain CONTAINS "ticket-megasport.ru" OR sourcentdomain CONTAINS "ticketoffice.kz" OR sourcentdomain CONTAINS "vitez-hockey.com" OR sourcentdomain CONTAINS "afisha-afmclub.ru" OR sourcentdomain CONTAINS "afisha-ghall.ru" OR sourcentdomain CONTAINS "aria-tickets.ru" OR sourcentdomain CONTAINS "atp500.ru" OR sourcentdomain CONTAINS "basket-khimki.ru" OR sourcentdomain CONTAINS "bdva.com.ru" OR sourcentdomain CONTAINS "cirque-spb.com" OR sourcentdomain CONTAINS "concert.spb.ru" OR sourcentdomain CONTAINS "cska-hokkey.ru" OR sourcentdomain CONTAINS "dkzelenograd-kassa.com" OR sourcentdomain CONTAINS "ed-sheeran.com.ru" OR sourcentdomain CONTAINS "embargo-villa.ru" OR sourcentdomain CONTAINS "evgeniy-grishkovets.com" OR sourcentdomain CONTAINS "fckhimki-tickets.ru" OR sourcentdomain CONTAINS "fckrasnodar-kassa.com" OR sourcentdomain CONTAINS "glav-club.ru" OR sourcentdomain CONTAINS "gogolcentr.ru" OR sourcentdomain CONTAINS "gruppa-lube.com" OR sourcentdomain CONTAINS "hcakbars.ru" OR sourcentdomain CONTAINS "kremlcup.com" OR sourcentdomain CONTAINS "kvartet-i-kassa.com" OR sourcentdomain CONTAINS "lencom-ticket.ru" OR sourcentdomain CONTAINS "lencom-tickets.ru" OR sourcentdomain CONTAINS "mht-tickets.ru" OR sourcentdomain CONTAINS "myatafest.com" OR sourcentdomain CONTAINS "rfs-tickets.com" OR sourcentdomain CONTAINS "rosahall-ticket.ru" OR sourcentdomain CONTAINS "shelkunchik-bolshoi.com" OR sourcentdomain CONTAINS "teatr-mossovet.ru" OR sourcentdomain CONTAINS "teatr-operetta.ru" OR sourcentdomain CONTAINS "teatr-viktuka.ru" OR sourcentdomain CONTAINS "theatre.msk.ru" OR sourcentdomain CONTAINS "tickets-concierge.ru" OR sourcentdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "baseclub-tickets.com" OR sourcehostname CONTAINS "circus-rnd.ru" OR sourcehostname CONTAINS "concertannaasti.com" OR sourcehostname CONTAINS "concertknyazz.com" OR sourcehostname CONTAINS "fs-tickets.ru" OR sourcehostname CONTAINS "kassir.com.ru" OR sourcehostname CONTAINS "kz-cosmos.ru" OR sourcehostname CONTAINS "lenkomafisha.ru" OR sourcehostname CONTAINS "masha-medved.ru" OR sourcehostname CONTAINS "mayakovski-teatr.com" OR sourcehostname CONTAINS "svetlana-zaharova.com" OR sourcehostname CONTAINS "teatrarmy.ru" OR sourcehostname CONTAINS "teatrpushkina.ru" OR sourcehostname CONTAINS "ticket-megasport.ru" OR sourcehostname CONTAINS "ticketoffice.kz" OR sourcehostname CONTAINS "vitez-hockey.com" OR sourcehostname CONTAINS "afisha-afmclub.ru" OR sourcehostname CONTAINS "afisha-ghall.ru" OR sourcehostname CONTAINS "aria-tickets.ru" OR sourcehostname CONTAINS "atp500.ru" OR sourcehostname CONTAINS "basket-khimki.ru" OR sourcehostname CONTAINS "bdva.com.ru" OR sourcehostname CONTAINS "cirque-spb.com" OR sourcehostname CONTAINS "concert.spb.ru" OR sourcehostname CONTAINS "cska-hokkey.ru" OR sourcehostname CONTAINS "dkzelenograd-kassa.com" OR sourcehostname CONTAINS "ed-sheeran.com.ru" OR sourcehostname CONTAINS "embargo-villa.ru" OR sourcehostname CONTAINS "evgeniy-grishkovets.com" OR sourcehostname CONTAINS "fckhimki-tickets.ru" OR sourcehostname CONTAINS "fckrasnodar-kassa.com" OR sourcehostname CONTAINS "glav-club.ru" OR sourcehostname CONTAINS "gogolcentr.ru" OR sourcehostname CONTAINS "gruppa-lube.com" OR sourcehostname CONTAINS "hcakbars.ru" OR sourcehostname CONTAINS "kremlcup.com" OR sourcehostname CONTAINS "kvartet-i-kassa.com" OR sourcehostname CONTAINS "lencom-ticket.ru" OR sourcehostname CONTAINS "lencom-tickets.ru" OR sourcehostname CONTAINS "mht-tickets.ru" OR sourcehostname CONTAINS "myatafest.com" OR sourcehostname CONTAINS "rfs-tickets.com" OR sourcehostname CONTAINS "rosahall-ticket.ru" OR sourcehostname CONTAINS "shelkunchik-bolshoi.com" OR sourcehostname CONTAINS "teatr-mossovet.ru" OR sourcehostname CONTAINS "teatr-operetta.ru" OR sourcehostname CONTAINS "teatr-viktuka.ru" OR sourcehostname CONTAINS "theatre.msk.ru" OR sourcehostname CONTAINS "tickets-concierge.ru" OR sourcehostname CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "baseclub-tickets.com" OR destinationntdomain CONTAINS "circus-rnd.ru" OR destinationntdomain CONTAINS "concertannaasti.com" OR destinationntdomain CONTAINS "concertknyazz.com" OR destinationntdomain CONTAINS "fs-tickets.ru" OR destinationntdomain CONTAINS "kassir.com.ru" OR destinationntdomain CONTAINS "kz-cosmos.ru" OR destinationntdomain CONTAINS "lenkomafisha.ru" OR destinationntdomain CONTAINS "masha-medved.ru" OR destinationntdomain CONTAINS "mayakovski-teatr.com" OR destinationntdomain CONTAINS "svetlana-zaharova.com" OR destinationntdomain CONTAINS "teatrarmy.ru" OR destinationntdomain CONTAINS "teatrpushkina.ru" OR destinationntdomain CONTAINS "ticket-megasport.ru" OR destinationntdomain CONTAINS "ticketoffice.kz" OR destinationntdomain CONTAINS "vitez-hockey.com" OR destinationntdomain CONTAINS "afisha-afmclub.ru" OR destinationntdomain CONTAINS "afisha-ghall.ru" OR destinationntdomain CONTAINS "aria-tickets.ru" OR destinationntdomain CONTAINS "atp500.ru" OR destinationntdomain CONTAINS "basket-khimki.ru" OR destinationntdomain CONTAINS "bdva.com.ru" OR destinationntdomain CONTAINS "cirque-spb.com" OR destinationntdomain CONTAINS "concert.spb.ru" OR destinationntdomain CONTAINS "cska-hokkey.ru" OR destinationntdomain CONTAINS "dkzelenograd-kassa.com" OR destinationntdomain CONTAINS "ed-sheeran.com.ru" OR destinationntdomain CONTAINS "embargo-villa.ru" OR destinationntdomain CONTAINS "evgeniy-grishkovets.com" OR destinationntdomain CONTAINS "fckhimki-tickets.ru" OR destinationntdomain CONTAINS "fckrasnodar-kassa.com" OR destinationntdomain CONTAINS "glav-club.ru" OR destinationntdomain CONTAINS "gogolcentr.ru" OR destinationntdomain CONTAINS "gruppa-lube.com" OR destinationntdomain CONTAINS "hcakbars.ru" OR destinationntdomain CONTAINS "kremlcup.com" OR destinationntdomain CONTAINS "kvartet-i-kassa.com" OR destinationntdomain CONTAINS "lencom-ticket.ru" OR destinationntdomain CONTAINS "lencom-tickets.ru" OR destinationntdomain CONTAINS "mht-tickets.ru" OR destinationntdomain CONTAINS "myatafest.com" OR destinationntdomain CONTAINS "rfs-tickets.com" OR destinationntdomain CONTAINS "rosahall-ticket.ru" OR destinationntdomain CONTAINS "shelkunchik-bolshoi.com" OR destinationntdomain CONTAINS "teatr-mossovet.ru" OR destinationntdomain CONTAINS "teatr-operetta.ru" OR destinationntdomain CONTAINS "teatr-viktuka.ru" OR destinationntdomain CONTAINS "theatre.msk.ru" OR destinationntdomain CONTAINS "tickets-concierge.ru" OR destinationntdomain CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "baseclub-tickets.com" OR requesturl CONTAINS "circus-rnd.ru" OR requesturl CONTAINS "concertannaasti.com" OR requesturl CONTAINS "concertknyazz.com" OR requesturl CONTAINS "fs-tickets.ru" OR requesturl CONTAINS "kassir.com.ru" OR requesturl CONTAINS "kz-cosmos.ru" OR requesturl CONTAINS "lenkomafisha.ru" OR requesturl CONTAINS "masha-medved.ru" OR requesturl CONTAINS "mayakovski-teatr.com" OR requesturl CONTAINS "svetlana-zaharova.com" OR requesturl CONTAINS "teatrarmy.ru" OR requesturl CONTAINS "teatrpushkina.ru" OR requesturl CONTAINS "ticket-megasport.ru" OR requesturl CONTAINS "ticketoffice.kz" OR requesturl CONTAINS "vitez-hockey.com" OR requesturl CONTAINS "afisha-afmclub.ru" OR requesturl CONTAINS "afisha-ghall.ru" OR requesturl CONTAINS "aria-tickets.ru" OR requesturl CONTAINS "atp500.ru" OR requesturl CONTAINS "basket-khimki.ru" OR requesturl CONTAINS "bdva.com.ru" OR requesturl CONTAINS "cirque-spb.com" OR requesturl CONTAINS "concert.spb.ru" OR requesturl CONTAINS "cska-hokkey.ru" OR requesturl CONTAINS "dkzelenograd-kassa.com" OR requesturl CONTAINS "ed-sheeran.com.ru" OR requesturl CONTAINS "embargo-villa.ru" OR requesturl CONTAINS "evgeniy-grishkovets.com" OR requesturl CONTAINS "fckhimki-tickets.ru" OR requesturl CONTAINS "fckrasnodar-kassa.com" OR requesturl CONTAINS "glav-club.ru" OR requesturl CONTAINS "gogolcentr.ru" OR requesturl CONTAINS "gruppa-lube.com" OR requesturl CONTAINS "hcakbars.ru" OR requesturl CONTAINS "kremlcup.com" OR requesturl CONTAINS "kvartet-i-kassa.com" OR requesturl CONTAINS "lencom-ticket.ru" OR requesturl CONTAINS "lencom-tickets.ru" OR requesturl CONTAINS "mht-tickets.ru" OR requesturl CONTAINS "myatafest.com" OR requesturl CONTAINS "rfs-tickets.com" OR requesturl CONTAINS "rosahall-ticket.ru" OR requesturl CONTAINS "shelkunchik-bolshoi.com" OR requesturl CONTAINS "teatr-mossovet.ru" OR requesturl CONTAINS "teatr-operetta.ru" OR requesturl CONTAINS "teatr-viktuka.ru" OR requesturl CONTAINS "theatre.msk.ru" OR requesturl CONTAINS "tickets-concierge.ru" OR requesturl CONTAINS "orlovsereygtour.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dklconcert.com" OR destinationhostname CONTAINS "glavkpalace.ru" OR destinationhostname CONTAINS "hc-lokomotive.ru" OR destinationhostname CONTAINS "konserv-kassa.com" OR destinationhostname CONTAINS "kz-mir.com" OR destinationhostname CONTAINS "rosahall-afisha.ru" OR destinationhostname CONTAINS "tickets-sibir.ru" OR destinationhostname CONTAINS "biletprivet.com" OR destinationhostname CONTAINS "kassy.com.ru" OR destinationhostname CONTAINS "afishasvkblport.ru" OR destinationhostname CONTAINS "annaasti-tickets.ru" OR destinationhostname CONTAINS "arena-traktor.ru" OR destinationhostname CONTAINS "big-circus.ru" OR destinationhostname CONTAINS "circus-kassa.com" OR destinationhostname CONTAINS "diagfest-tickets.ru" OR destinationhostname CONTAINS "dkgorbunova.com" OR destinationhostname CONTAINS "fcdynamo-kassa.ru" OR destinationhostname CONTAINS "festivalnyi-sochi.ru" OR destinationhostname CONTAINS "fs-granpri.ru" OR destinationhostname CONTAINS "gipsybar.ru" OR destinationhostname CONTAINS "gogol-centr.com" OR destinationhostname CONTAINS "green-teatr.ru" OR destinationhostname CONTAINS "krknagornyi.ru" OR destinationhostname CONTAINS "krskfilarmonia.com" OR destinationhostname CONTAINS "live-tickets.ru" OR destinationhostname CONTAINS "ltheatre.com" OR destinationhostname CONTAINS "mayakovski-teatr.ru" OR destinationhostname CONTAINS "nn-basket.com" OR destinationhostname CONTAINS "olimpkrasnodar.com" OR destinationhostname CONTAINS "roofmusicgroup.com" OR destinationhostname CONTAINS "rosahall-tickets.ru" OR destinationhostname CONTAINS "rukivverh-ticket.ru" OR destinationhostname CONTAINS "sochi-concert.com" OR destinationhostname CONTAINS "tickets-surganova.com" OR destinationhostname CONTAINS "tickets-zveri.com" OR destinationhostname CONTAINS "urban-concert.com" OR destinationhostname CONTAINS "volyabilet.ru" OR destinationhostname CONTAINS "fcsochi-tickets.ru" OR destinationhostname CONTAINS "museums.msk.ru" OR destinationhostname CONTAINS "permopera-kassa.com" OR destinationhostname CONTAINS "pro-concert.com" OR destinationhostname CONTAINS "afisha-btheatre.ru" OR destinationhostname CONTAINS "arenadinamo.ru" OR destinationhostname CONTAINS "arenadynamo.ru" OR destinationhostname CONTAINS "congresshall-afisha.com" OR destinationhostname CONTAINS "dk-octoberkassa.com" OR destinationhostname CONTAINS "dynamobilet.ru" OR destinationhostname CONTAINS "fs-ticketing.ru" OR destinationhostname CONTAINS "galkin-tickets.ru" OR destinationhostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dklconcert.com" OR sourcentdomain CONTAINS "glavkpalace.ru" OR sourcentdomain CONTAINS "hc-lokomotive.ru" OR sourcentdomain CONTAINS "konserv-kassa.com" OR sourcentdomain CONTAINS "kz-mir.com" OR sourcentdomain CONTAINS "rosahall-afisha.ru" OR sourcentdomain CONTAINS "tickets-sibir.ru" OR sourcentdomain CONTAINS "biletprivet.com" OR sourcentdomain CONTAINS "kassy.com.ru" OR sourcentdomain CONTAINS "afishasvkblport.ru" OR sourcentdomain CONTAINS "annaasti-tickets.ru" OR sourcentdomain CONTAINS "arena-traktor.ru" OR sourcentdomain CONTAINS "big-circus.ru" OR sourcentdomain CONTAINS "circus-kassa.com" OR sourcentdomain CONTAINS "diagfest-tickets.ru" OR sourcentdomain CONTAINS "dkgorbunova.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.ru" OR sourcentdomain CONTAINS "festivalnyi-sochi.ru" OR sourcentdomain CONTAINS "fs-granpri.ru" OR sourcentdomain CONTAINS "gipsybar.ru" OR sourcentdomain CONTAINS "gogol-centr.com" OR sourcentdomain CONTAINS "green-teatr.ru" OR sourcentdomain CONTAINS "krknagornyi.ru" OR sourcentdomain CONTAINS "krskfilarmonia.com" OR sourcentdomain CONTAINS "live-tickets.ru" OR sourcentdomain CONTAINS "ltheatre.com" OR sourcentdomain CONTAINS "mayakovski-teatr.ru" OR sourcentdomain CONTAINS "nn-basket.com" OR sourcentdomain CONTAINS "olimpkrasnodar.com" OR sourcentdomain CONTAINS "roofmusicgroup.com" OR sourcentdomain CONTAINS "rosahall-tickets.ru" OR sourcentdomain CONTAINS "rukivverh-ticket.ru" OR sourcentdomain CONTAINS "sochi-concert.com" OR sourcentdomain CONTAINS "tickets-surganova.com" OR sourcentdomain CONTAINS "tickets-zveri.com" OR sourcentdomain CONTAINS "urban-concert.com" OR sourcentdomain CONTAINS "volyabilet.ru" OR sourcentdomain CONTAINS "fcsochi-tickets.ru" OR sourcentdomain CONTAINS "museums.msk.ru" OR sourcentdomain CONTAINS "permopera-kassa.com" OR sourcentdomain CONTAINS "pro-concert.com" OR sourcentdomain CONTAINS "afisha-btheatre.ru" OR sourcentdomain CONTAINS "arenadinamo.ru" OR sourcentdomain CONTAINS "arenadynamo.ru" OR sourcentdomain CONTAINS "congresshall-afisha.com" OR sourcentdomain CONTAINS "dk-octoberkassa.com" OR sourcentdomain CONTAINS "dynamobilet.ru" OR sourcentdomain CONTAINS "fs-ticketing.ru" OR sourcentdomain CONTAINS "galkin-tickets.ru" OR sourcentdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dklconcert.com" OR sourcehostname CONTAINS "glavkpalace.ru" OR sourcehostname CONTAINS "hc-lokomotive.ru" OR sourcehostname CONTAINS "konserv-kassa.com" OR sourcehostname CONTAINS "kz-mir.com" OR sourcehostname CONTAINS "rosahall-afisha.ru" OR sourcehostname CONTAINS "tickets-sibir.ru" OR sourcehostname CONTAINS "biletprivet.com" OR sourcehostname CONTAINS "kassy.com.ru" OR sourcehostname CONTAINS "afishasvkblport.ru" OR sourcehostname CONTAINS "annaasti-tickets.ru" OR sourcehostname CONTAINS "arena-traktor.ru" OR sourcehostname CONTAINS "big-circus.ru" OR sourcehostname CONTAINS "circus-kassa.com" OR sourcehostname CONTAINS "diagfest-tickets.ru" OR sourcehostname CONTAINS "dkgorbunova.com" OR sourcehostname CONTAINS "fcdynamo-kassa.ru" OR sourcehostname CONTAINS "festivalnyi-sochi.ru" OR sourcehostname CONTAINS "fs-granpri.ru" OR sourcehostname CONTAINS "gipsybar.ru" OR sourcehostname CONTAINS "gogol-centr.com" OR sourcehostname CONTAINS "green-teatr.ru" OR sourcehostname CONTAINS "krknagornyi.ru" OR sourcehostname CONTAINS "krskfilarmonia.com" OR sourcehostname CONTAINS "live-tickets.ru" OR sourcehostname CONTAINS "ltheatre.com" OR sourcehostname CONTAINS "mayakovski-teatr.ru" OR sourcehostname CONTAINS "nn-basket.com" OR sourcehostname CONTAINS "olimpkrasnodar.com" OR sourcehostname CONTAINS "roofmusicgroup.com" OR sourcehostname CONTAINS "rosahall-tickets.ru" OR sourcehostname CONTAINS "rukivverh-ticket.ru" OR sourcehostname CONTAINS "sochi-concert.com" OR sourcehostname CONTAINS "tickets-surganova.com" OR sourcehostname CONTAINS "tickets-zveri.com" OR sourcehostname CONTAINS "urban-concert.com" OR sourcehostname CONTAINS "volyabilet.ru" OR sourcehostname CONTAINS "fcsochi-tickets.ru" OR sourcehostname CONTAINS "museums.msk.ru" OR sourcehostname CONTAINS "permopera-kassa.com" OR sourcehostname CONTAINS "pro-concert.com" OR sourcehostname CONTAINS "afisha-btheatre.ru" OR sourcehostname CONTAINS "arenadinamo.ru" OR sourcehostname CONTAINS "arenadynamo.ru" OR sourcehostname CONTAINS "congresshall-afisha.com" OR sourcehostname CONTAINS "dk-octoberkassa.com" OR sourcehostname CONTAINS "dynamobilet.ru" OR sourcehostname CONTAINS "fs-ticketing.ru" OR sourcehostname CONTAINS "galkin-tickets.ru" OR sourcehostname CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dklconcert.com" OR destinationntdomain CONTAINS "glavkpalace.ru" OR destinationntdomain CONTAINS "hc-lokomotive.ru" OR destinationntdomain CONTAINS "konserv-kassa.com" OR destinationntdomain CONTAINS "kz-mir.com" OR destinationntdomain CONTAINS "rosahall-afisha.ru" OR destinationntdomain CONTAINS "tickets-sibir.ru" OR destinationntdomain CONTAINS "biletprivet.com" OR destinationntdomain CONTAINS "kassy.com.ru" OR destinationntdomain CONTAINS "afishasvkblport.ru" OR destinationntdomain CONTAINS "annaasti-tickets.ru" OR destinationntdomain CONTAINS "arena-traktor.ru" OR destinationntdomain CONTAINS "big-circus.ru" OR destinationntdomain CONTAINS "circus-kassa.com" OR destinationntdomain CONTAINS "diagfest-tickets.ru" OR destinationntdomain CONTAINS "dkgorbunova.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.ru" OR destinationntdomain CONTAINS "festivalnyi-sochi.ru" OR destinationntdomain CONTAINS "fs-granpri.ru" OR destinationntdomain CONTAINS "gipsybar.ru" OR destinationntdomain CONTAINS "gogol-centr.com" OR destinationntdomain CONTAINS "green-teatr.ru" OR destinationntdomain CONTAINS "krknagornyi.ru" OR destinationntdomain CONTAINS "krskfilarmonia.com" OR destinationntdomain CONTAINS "live-tickets.ru" OR destinationntdomain CONTAINS "ltheatre.com" OR destinationntdomain CONTAINS "mayakovski-teatr.ru" OR destinationntdomain CONTAINS "nn-basket.com" OR destinationntdomain CONTAINS "olimpkrasnodar.com" OR destinationntdomain CONTAINS "roofmusicgroup.com" OR destinationntdomain CONTAINS "rosahall-tickets.ru" OR destinationntdomain CONTAINS "rukivverh-ticket.ru" OR destinationntdomain CONTAINS "sochi-concert.com" OR destinationntdomain CONTAINS "tickets-surganova.com" OR destinationntdomain CONTAINS "tickets-zveri.com" OR destinationntdomain CONTAINS "urban-concert.com" OR destinationntdomain CONTAINS "volyabilet.ru" OR destinationntdomain CONTAINS "fcsochi-tickets.ru" OR destinationntdomain CONTAINS "museums.msk.ru" OR destinationntdomain CONTAINS "permopera-kassa.com" OR destinationntdomain CONTAINS "pro-concert.com" OR destinationntdomain CONTAINS "afisha-btheatre.ru" OR destinationntdomain CONTAINS "arenadinamo.ru" OR destinationntdomain CONTAINS "arenadynamo.ru" OR destinationntdomain CONTAINS "congresshall-afisha.com" OR destinationntdomain CONTAINS "dk-octoberkassa.com" OR destinationntdomain CONTAINS "dynamobilet.ru" OR destinationntdomain CONTAINS "fs-ticketing.ru" OR destinationntdomain CONTAINS "galkin-tickets.ru" OR destinationntdomain CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "dklconcert.com" OR requesturl CONTAINS "glavkpalace.ru" OR requesturl CONTAINS "hc-lokomotive.ru" OR requesturl CONTAINS "konserv-kassa.com" OR requesturl CONTAINS "kz-mir.com" OR requesturl CONTAINS "rosahall-afisha.ru" OR requesturl CONTAINS "tickets-sibir.ru" OR requesturl CONTAINS "biletprivet.com" OR requesturl CONTAINS "kassy.com.ru" OR requesturl CONTAINS "afishasvkblport.ru" OR requesturl CONTAINS "annaasti-tickets.ru" OR requesturl CONTAINS "arena-traktor.ru" OR requesturl CONTAINS "big-circus.ru" OR requesturl CONTAINS "circus-kassa.com" OR requesturl CONTAINS "diagfest-tickets.ru" OR requesturl CONTAINS "dkgorbunova.com" OR requesturl CONTAINS "fcdynamo-kassa.ru" OR requesturl CONTAINS "festivalnyi-sochi.ru" OR requesturl CONTAINS "fs-granpri.ru" OR requesturl CONTAINS "gipsybar.ru" OR requesturl CONTAINS "gogol-centr.com" OR requesturl CONTAINS "green-teatr.ru" OR requesturl CONTAINS "krknagornyi.ru" OR requesturl CONTAINS "krskfilarmonia.com" OR requesturl CONTAINS "live-tickets.ru" OR requesturl CONTAINS "ltheatre.com" OR requesturl CONTAINS "mayakovski-teatr.ru" OR requesturl CONTAINS "nn-basket.com" OR requesturl CONTAINS "olimpkrasnodar.com" OR requesturl CONTAINS "roofmusicgroup.com" OR requesturl CONTAINS "rosahall-tickets.ru" OR requesturl CONTAINS "rukivverh-ticket.ru" OR requesturl CONTAINS "sochi-concert.com" OR requesturl CONTAINS "tickets-surganova.com" OR requesturl CONTAINS "tickets-zveri.com" OR requesturl CONTAINS "urban-concert.com" OR requesturl CONTAINS "volyabilet.ru" OR requesturl CONTAINS "fcsochi-tickets.ru" OR requesturl CONTAINS "museums.msk.ru" OR requesturl CONTAINS "permopera-kassa.com" OR requesturl CONTAINS "pro-concert.com" OR requesturl CONTAINS "afisha-btheatre.ru" OR requesturl CONTAINS "arenadinamo.ru" OR requesturl CONTAINS "arenadynamo.ru" OR requesturl CONTAINS "congresshall-afisha.com" OR requesturl CONTAINS "dk-octoberkassa.com" OR requesturl CONTAINS "dynamobilet.ru" OR requesturl CONTAINS "fs-ticketing.ru" OR requesturl CONTAINS "galkin-tickets.ru" OR requesturl CONTAINS "garik-sukachev.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "icecub-kassa.ru" OR destinationhostname CONTAINS "kanyewest.com.ru" OR destinationhostname CONTAINS "msk-concert.com" OR destinationhostname CONTAINS "oxxymiron.com" OR destinationhostname CONTAINS "pro-khl.com" OR destinationhostname CONTAINS "tagankasat.ru" OR destinationhostname CONTAINS "teatr-kassa.com" OR destinationhostname CONTAINS "theatr.msk.ru" OR destinationhostname CONTAINS "ticket-am.com" OR destinationhostname CONTAINS "ticket-euro2024.de" OR destinationhostname CONTAINS "tickets-ska.com" OR destinationhostname CONTAINS "torpedo-hockey.ru" OR destinationhostname CONTAINS "twenty-one-pilots.ru" OR destinationhostname CONTAINS "zivert-tickets.ru" OR destinationhostname CONTAINS "arena-lada.com" OR destinationhostname CONTAINS "bc-khimki.ru" OR destinationhostname CONTAINS "bdramtheatre.com" OR destinationhostname CONTAINS "cafa-tickets.com" OR destinationhostname CONTAINS "december-fest.com" OR destinationhostname CONTAINS "fetisov-arena.com" OR destinationhostname CONTAINS "grand-circus.ru" OR destinationhostname CONTAINS "hcadmiral.com" OR destinationhostname CONTAINS "hc-lada.com" OR destinationhostname CONTAINS "hc-severstal.com" OR destinationhostname CONTAINS "hc-spartak-tickets.ru" OR destinationhostname CONTAINS "iron-maiden.com.ru" OR destinationhostname CONTAINS "kaliningrad-arena.ru" OR destinationhostname CONTAINS "kassa-musichall.com" OR destinationhostname CONTAINS "kino-banda.ru" OR destinationhostname CONTAINS "netrebko.ru" OR destinationhostname CONTAINS "r-arena-sochi.ru" OR destinationhostname CONTAINS "skyubia-spb.ru" OR destinationhostname CONTAINS "sochihockeyopen.com" OR destinationhostname CONTAINS "teatr-plehanova.ru" OR destinationhostname CONTAINS "teatr-ugolok.ru" OR destinationhostname CONTAINS "ticketsrozenbaum.com" OR destinationhostname CONTAINS "till-lindemann.ru" OR destinationhostname CONTAINS "ufc-fighting.ru" OR destinationhostname CONTAINS "ugolok-durova.ru" OR destinationhostname CONTAINS "vivabilet.ru" OR destinationhostname CONTAINS "volya-afisha.ru" OR destinationhostname CONTAINS "zivert.am" OR destinationhostname CONTAINS "agutin-tour.ru" OR destinationhostname CONTAINS "arena-mordovia.com" OR destinationhostname CONTAINS "biletim-tickets.ru" OR destinationhostname CONTAINS "bubble-festival.com" OR destinationhostname CONTAINS "euroservise.com" OR destinationhostname CONTAINS "fc-fakel.com" OR destinationhostname CONTAINS "grandsiberiahall.com" OR destinationhostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "icecub-kassa.ru" OR sourcentdomain CONTAINS "kanyewest.com.ru" OR sourcentdomain CONTAINS "msk-concert.com" OR sourcentdomain CONTAINS "oxxymiron.com" OR sourcentdomain CONTAINS "pro-khl.com" OR sourcentdomain CONTAINS "tagankasat.ru" OR sourcentdomain CONTAINS "teatr-kassa.com" OR sourcentdomain CONTAINS "theatr.msk.ru" OR sourcentdomain CONTAINS "ticket-am.com" OR sourcentdomain CONTAINS "ticket-euro2024.de" OR sourcentdomain CONTAINS "tickets-ska.com" OR sourcentdomain CONTAINS "torpedo-hockey.ru" OR sourcentdomain CONTAINS "twenty-one-pilots.ru" OR sourcentdomain CONTAINS "zivert-tickets.ru" OR sourcentdomain CONTAINS "arena-lada.com" OR sourcentdomain CONTAINS "bc-khimki.ru" OR sourcentdomain CONTAINS "bdramtheatre.com" OR sourcentdomain CONTAINS "cafa-tickets.com" OR sourcentdomain CONTAINS "december-fest.com" OR sourcentdomain CONTAINS "fetisov-arena.com" OR sourcentdomain CONTAINS "grand-circus.ru" OR sourcentdomain CONTAINS "hcadmiral.com" OR sourcentdomain CONTAINS "hc-lada.com" OR sourcentdomain CONTAINS "hc-severstal.com" OR sourcentdomain CONTAINS "hc-spartak-tickets.ru" OR sourcentdomain CONTAINS "iron-maiden.com.ru" OR sourcentdomain CONTAINS "kaliningrad-arena.ru" OR sourcentdomain CONTAINS "kassa-musichall.com" OR sourcentdomain CONTAINS "kino-banda.ru" OR sourcentdomain CONTAINS "netrebko.ru" OR sourcentdomain CONTAINS "r-arena-sochi.ru" OR sourcentdomain CONTAINS "skyubia-spb.ru" OR sourcentdomain CONTAINS "sochihockeyopen.com" OR sourcentdomain CONTAINS "teatr-plehanova.ru" OR sourcentdomain CONTAINS "teatr-ugolok.ru" OR sourcentdomain CONTAINS "ticketsrozenbaum.com" OR sourcentdomain CONTAINS "till-lindemann.ru" OR sourcentdomain CONTAINS "ufc-fighting.ru" OR sourcentdomain CONTAINS "ugolok-durova.ru" OR sourcentdomain CONTAINS "vivabilet.ru" OR sourcentdomain CONTAINS "volya-afisha.ru" OR sourcentdomain CONTAINS "zivert.am" OR sourcentdomain CONTAINS "agutin-tour.ru" OR sourcentdomain CONTAINS "arena-mordovia.com" OR sourcentdomain CONTAINS "biletim-tickets.ru" OR sourcentdomain CONTAINS "bubble-festival.com" OR sourcentdomain CONTAINS "euroservise.com" OR sourcentdomain CONTAINS "fc-fakel.com" OR sourcentdomain CONTAINS "grandsiberiahall.com" OR sourcentdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "icecub-kassa.ru" OR sourcehostname CONTAINS "kanyewest.com.ru" OR sourcehostname CONTAINS "msk-concert.com" OR sourcehostname CONTAINS "oxxymiron.com" OR sourcehostname CONTAINS "pro-khl.com" OR sourcehostname CONTAINS "tagankasat.ru" OR sourcehostname CONTAINS "teatr-kassa.com" OR sourcehostname CONTAINS "theatr.msk.ru" OR sourcehostname CONTAINS "ticket-am.com" OR sourcehostname CONTAINS "ticket-euro2024.de" OR sourcehostname CONTAINS "tickets-ska.com" OR sourcehostname CONTAINS "torpedo-hockey.ru" OR sourcehostname CONTAINS "twenty-one-pilots.ru" OR sourcehostname CONTAINS "zivert-tickets.ru" OR sourcehostname CONTAINS "arena-lada.com" OR sourcehostname CONTAINS "bc-khimki.ru" OR sourcehostname CONTAINS "bdramtheatre.com" OR sourcehostname CONTAINS "cafa-tickets.com" OR sourcehostname CONTAINS "december-fest.com" OR sourcehostname CONTAINS "fetisov-arena.com" OR sourcehostname CONTAINS "grand-circus.ru" OR sourcehostname CONTAINS "hcadmiral.com" OR sourcehostname CONTAINS "hc-lada.com" OR sourcehostname CONTAINS "hc-severstal.com" OR sourcehostname CONTAINS "hc-spartak-tickets.ru" OR sourcehostname CONTAINS "iron-maiden.com.ru" OR sourcehostname CONTAINS "kaliningrad-arena.ru" OR sourcehostname CONTAINS "kassa-musichall.com" OR sourcehostname CONTAINS "kino-banda.ru" OR sourcehostname CONTAINS "netrebko.ru" OR sourcehostname CONTAINS "r-arena-sochi.ru" OR sourcehostname CONTAINS "skyubia-spb.ru" OR sourcehostname CONTAINS "sochihockeyopen.com" OR sourcehostname CONTAINS "teatr-plehanova.ru" OR sourcehostname CONTAINS "teatr-ugolok.ru" OR sourcehostname CONTAINS "ticketsrozenbaum.com" OR sourcehostname CONTAINS "till-lindemann.ru" OR sourcehostname CONTAINS "ufc-fighting.ru" OR sourcehostname CONTAINS "ugolok-durova.ru" OR sourcehostname CONTAINS "vivabilet.ru" OR sourcehostname CONTAINS "volya-afisha.ru" OR sourcehostname CONTAINS "zivert.am" OR sourcehostname CONTAINS "agutin-tour.ru" OR sourcehostname CONTAINS "arena-mordovia.com" OR sourcehostname CONTAINS "biletim-tickets.ru" OR sourcehostname CONTAINS "bubble-festival.com" OR sourcehostname CONTAINS "euroservise.com" OR sourcehostname CONTAINS "fc-fakel.com" OR sourcehostname CONTAINS "grandsiberiahall.com" OR sourcehostname CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "icecub-kassa.ru" OR destinationntdomain CONTAINS "kanyewest.com.ru" OR destinationntdomain CONTAINS "msk-concert.com" OR destinationntdomain CONTAINS "oxxymiron.com" OR destinationntdomain CONTAINS "pro-khl.com" OR destinationntdomain CONTAINS "tagankasat.ru" OR destinationntdomain CONTAINS "teatr-kassa.com" OR destinationntdomain CONTAINS "theatr.msk.ru" OR destinationntdomain CONTAINS "ticket-am.com" OR destinationntdomain CONTAINS "ticket-euro2024.de" OR destinationntdomain CONTAINS "tickets-ska.com" OR destinationntdomain CONTAINS "torpedo-hockey.ru" OR destinationntdomain CONTAINS "twenty-one-pilots.ru" OR destinationntdomain CONTAINS "zivert-tickets.ru" OR destinationntdomain CONTAINS "arena-lada.com" OR destinationntdomain CONTAINS "bc-khimki.ru" OR destinationntdomain CONTAINS "bdramtheatre.com" OR destinationntdomain CONTAINS "cafa-tickets.com" OR destinationntdomain CONTAINS "december-fest.com" OR destinationntdomain CONTAINS "fetisov-arena.com" OR destinationntdomain CONTAINS "grand-circus.ru" OR destinationntdomain CONTAINS "hcadmiral.com" OR destinationntdomain CONTAINS "hc-lada.com" OR destinationntdomain CONTAINS "hc-severstal.com" OR destinationntdomain CONTAINS "hc-spartak-tickets.ru" OR destinationntdomain CONTAINS "iron-maiden.com.ru" OR destinationntdomain CONTAINS "kaliningrad-arena.ru" OR destinationntdomain CONTAINS "kassa-musichall.com" OR destinationntdomain CONTAINS "kino-banda.ru" OR destinationntdomain CONTAINS "netrebko.ru" OR destinationntdomain CONTAINS "r-arena-sochi.ru" OR destinationntdomain CONTAINS "skyubia-spb.ru" OR destinationntdomain CONTAINS "sochihockeyopen.com" OR destinationntdomain CONTAINS "teatr-plehanova.ru" OR destinationntdomain CONTAINS "teatr-ugolok.ru" OR destinationntdomain CONTAINS "ticketsrozenbaum.com" OR destinationntdomain CONTAINS "till-lindemann.ru" OR destinationntdomain CONTAINS "ufc-fighting.ru" OR destinationntdomain CONTAINS "ugolok-durova.ru" OR destinationntdomain CONTAINS "vivabilet.ru" OR destinationntdomain CONTAINS "volya-afisha.ru" OR destinationntdomain CONTAINS "zivert.am" OR destinationntdomain CONTAINS "agutin-tour.ru" OR destinationntdomain CONTAINS "arena-mordovia.com" OR destinationntdomain CONTAINS "biletim-tickets.ru" OR destinationntdomain CONTAINS "bubble-festival.com" OR destinationntdomain CONTAINS "euroservise.com" OR destinationntdomain CONTAINS "fc-fakel.com" OR destinationntdomain CONTAINS "grandsiberiahall.com" OR destinationntdomain CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "icecub-kassa.ru" OR requesturl CONTAINS "kanyewest.com.ru" OR requesturl CONTAINS "msk-concert.com" OR requesturl CONTAINS "oxxymiron.com" OR requesturl CONTAINS "pro-khl.com" OR requesturl CONTAINS "tagankasat.ru" OR requesturl CONTAINS "teatr-kassa.com" OR requesturl CONTAINS "theatr.msk.ru" OR requesturl CONTAINS "ticket-am.com" OR requesturl CONTAINS "ticket-euro2024.de" OR requesturl CONTAINS "tickets-ska.com" OR requesturl CONTAINS "torpedo-hockey.ru" OR requesturl CONTAINS "twenty-one-pilots.ru" OR requesturl CONTAINS "zivert-tickets.ru" OR requesturl CONTAINS "arena-lada.com" OR requesturl CONTAINS "bc-khimki.ru" OR requesturl CONTAINS "bdramtheatre.com" OR requesturl CONTAINS "cafa-tickets.com" OR requesturl CONTAINS "december-fest.com" OR requesturl CONTAINS "fetisov-arena.com" OR requesturl CONTAINS "grand-circus.ru" OR requesturl CONTAINS "hcadmiral.com" OR requesturl CONTAINS "hc-lada.com" OR requesturl CONTAINS "hc-severstal.com" OR requesturl CONTAINS "hc-spartak-tickets.ru" OR requesturl CONTAINS "iron-maiden.com.ru" OR requesturl CONTAINS "kaliningrad-arena.ru" OR requesturl CONTAINS "kassa-musichall.com" OR requesturl CONTAINS "kino-banda.ru" OR requesturl CONTAINS "netrebko.ru" OR requesturl CONTAINS "r-arena-sochi.ru" OR requesturl CONTAINS "skyubia-spb.ru" OR requesturl CONTAINS "sochihockeyopen.com" OR requesturl CONTAINS "teatr-plehanova.ru" OR requesturl CONTAINS "teatr-ugolok.ru" OR requesturl CONTAINS "ticketsrozenbaum.com" OR requesturl CONTAINS "till-lindemann.ru" OR requesturl CONTAINS "ufc-fighting.ru" OR requesturl CONTAINS "ugolok-durova.ru" OR requesturl CONTAINS "vivabilet.ru" OR requesturl CONTAINS "volya-afisha.ru" OR requesturl CONTAINS "zivert.am" OR requesturl CONTAINS "agutin-tour.ru" OR requesturl CONTAINS "arena-mordovia.com" OR requesturl CONTAINS "biletim-tickets.ru" OR requesturl CONTAINS "bubble-festival.com" OR requesturl CONTAINS "euroservise.com" OR requesturl CONTAINS "fc-fakel.com" OR requesturl CONTAINS "grandsiberiahall.com" OR requesturl CONTAINS "rv-bar.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dram-teatr-krd.com" OR destinationhostname CONTAINS "almaty-arena.com" OR destinationhostname CONTAINS "fc-akron.com" OR destinationhostname CONTAINS "ice-shows.ru" OR destinationhostname CONTAINS "arena-tractor.com" OR destinationhostname CONTAINS "autodrom-igora.com" OR destinationhostname CONTAINS "dance-kubok-mira.com" OR destinationhostname CONTAINS "fcrubin-kassa.ru" OR destinationhostname CONTAINS "harry-styles.ru" OR destinationhostname CONTAINS "hcsochi-tickets.ru" OR destinationhostname CONTAINS "luzhniki-kassa.com" OR destinationhostname CONTAINS "mainstage-kassa.com" OR destinationhostname CONTAINS "moulinrouge-kabare.com" OR destinationhostname CONTAINS "napokrovke.com" OR destinationhostname CONTAINS "newwave-tickets.ru" OR destinationhostname CONTAINS "russkayapesnya.ru" OR destinationhostname CONTAINS "saburovnurlan.ru" OR destinationhostname CONTAINS "concert-onyx.com" OR destinationhostname CONTAINS "annaasti-concert.ru" OR destinationhostname CONTAINS "cropp-arena.ru" OR destinationhostname CONTAINS "diana-vishneva.com" OR destinationhostname CONTAINS "eurofootballchamp.com" OR destinationhostname CONTAINS "fctambov.com" OR destinationhostname CONTAINS "fight-tickets.ru" OR destinationhostname CONTAINS "kpokyc-kacca.ru" OR destinationhostname CONTAINS "mossovetafisa.ru" OR destinationhostname CONTAINS "newwavesochi.com" OR destinationhostname CONTAINS "satire-afisha.ru" OR destinationhostname CONTAINS "standupbilet.com" OR destinationhostname CONTAINS "tickets-hcs.com" OR destinationhostname CONTAINS "club-morze.com" OR destinationhostname CONTAINS "eurofootball-tickets.com" OR destinationhostname CONTAINS "tickets-mmd.com" OR destinationhostname CONTAINS "cska-kassa.com" OR destinationhostname CONTAINS "events-ge.com" OR destinationhostname CONTAINS "fc-dynamo-moscow.ru" OR destinationhostname CONTAINS "gldnmask.com" OR destinationhostname CONTAINS "kskarena.com" OR destinationhostname CONTAINS "tickets-big-love-show.com" OR destinationhostname CONTAINS "arenakazan.ru" OR destinationhostname CONTAINS "cska-basket.ru" OR destinationhostname CONTAINS "dkzh-nsk.ru" OR destinationhostname CONTAINS "luzhniki-afisha.com" OR destinationhostname CONTAINS "tyuz-spb.com" OR destinationhostname CONTAINS "tickets-az.com" OR destinationhostname CONTAINS "anna-karenina.ru" OR destinationhostname CONTAINS "crocus-concerthall.ru" OR destinationhostname CONTAINS "gazarena.ru" OR destinationhostname CONTAINS "gazarena.spb.ru" OR destinationhostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dram-teatr-krd.com" OR sourcentdomain CONTAINS "almaty-arena.com" OR sourcentdomain CONTAINS "fc-akron.com" OR sourcentdomain CONTAINS "ice-shows.ru" OR sourcentdomain CONTAINS "arena-tractor.com" OR sourcentdomain CONTAINS "autodrom-igora.com" OR sourcentdomain CONTAINS "dance-kubok-mira.com" OR sourcentdomain CONTAINS "fcrubin-kassa.ru" OR sourcentdomain CONTAINS "harry-styles.ru" OR sourcentdomain CONTAINS "hcsochi-tickets.ru" OR sourcentdomain CONTAINS "luzhniki-kassa.com" OR sourcentdomain CONTAINS "mainstage-kassa.com" OR sourcentdomain CONTAINS "moulinrouge-kabare.com" OR sourcentdomain CONTAINS "napokrovke.com" OR sourcentdomain CONTAINS "newwave-tickets.ru" OR sourcentdomain CONTAINS "russkayapesnya.ru" OR sourcentdomain CONTAINS "saburovnurlan.ru" OR sourcentdomain CONTAINS "concert-onyx.com" OR sourcentdomain CONTAINS "annaasti-concert.ru" OR sourcentdomain CONTAINS "cropp-arena.ru" OR sourcentdomain CONTAINS "diana-vishneva.com" OR sourcentdomain CONTAINS "eurofootballchamp.com" OR sourcentdomain CONTAINS "fctambov.com" OR sourcentdomain CONTAINS "fight-tickets.ru" OR sourcentdomain CONTAINS "kpokyc-kacca.ru" OR sourcentdomain CONTAINS "mossovetafisa.ru" OR sourcentdomain CONTAINS "newwavesochi.com" OR sourcentdomain CONTAINS "satire-afisha.ru" OR sourcentdomain CONTAINS "standupbilet.com" OR sourcentdomain CONTAINS "tickets-hcs.com" OR sourcentdomain CONTAINS "club-morze.com" OR sourcentdomain CONTAINS "eurofootball-tickets.com" OR sourcentdomain CONTAINS "tickets-mmd.com" OR sourcentdomain CONTAINS "cska-kassa.com" OR sourcentdomain CONTAINS "events-ge.com" OR sourcentdomain CONTAINS "fc-dynamo-moscow.ru" OR sourcentdomain CONTAINS "gldnmask.com" OR sourcentdomain CONTAINS "kskarena.com" OR sourcentdomain CONTAINS "tickets-big-love-show.com" OR sourcentdomain CONTAINS "arenakazan.ru" OR sourcentdomain CONTAINS "cska-basket.ru" OR sourcentdomain CONTAINS "dkzh-nsk.ru" OR sourcentdomain CONTAINS "luzhniki-afisha.com" OR sourcentdomain CONTAINS "tyuz-spb.com" OR sourcentdomain CONTAINS "tickets-az.com" OR sourcentdomain CONTAINS "anna-karenina.ru" OR sourcentdomain CONTAINS "crocus-concerthall.ru" OR sourcentdomain CONTAINS "gazarena.ru" OR sourcentdomain CONTAINS "gazarena.spb.ru" OR sourcentdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dram-teatr-krd.com" OR sourcehostname CONTAINS "almaty-arena.com" OR sourcehostname CONTAINS "fc-akron.com" OR sourcehostname CONTAINS "ice-shows.ru" OR sourcehostname CONTAINS "arena-tractor.com" OR sourcehostname CONTAINS "autodrom-igora.com" OR sourcehostname CONTAINS "dance-kubok-mira.com" OR sourcehostname CONTAINS "fcrubin-kassa.ru" OR sourcehostname CONTAINS "harry-styles.ru" OR sourcehostname CONTAINS "hcsochi-tickets.ru" OR sourcehostname CONTAINS "luzhniki-kassa.com" OR sourcehostname CONTAINS "mainstage-kassa.com" OR sourcehostname CONTAINS "moulinrouge-kabare.com" OR sourcehostname CONTAINS "napokrovke.com" OR sourcehostname CONTAINS "newwave-tickets.ru" OR sourcehostname CONTAINS "russkayapesnya.ru" OR sourcehostname CONTAINS "saburovnurlan.ru" OR sourcehostname CONTAINS "concert-onyx.com" OR sourcehostname CONTAINS "annaasti-concert.ru" OR sourcehostname CONTAINS "cropp-arena.ru" OR sourcehostname CONTAINS "diana-vishneva.com" OR sourcehostname CONTAINS "eurofootballchamp.com" OR sourcehostname CONTAINS "fctambov.com" OR sourcehostname CONTAINS "fight-tickets.ru" OR sourcehostname CONTAINS "kpokyc-kacca.ru" OR sourcehostname CONTAINS "mossovetafisa.ru" OR sourcehostname CONTAINS "newwavesochi.com" OR sourcehostname CONTAINS "satire-afisha.ru" OR sourcehostname CONTAINS "standupbilet.com" OR sourcehostname CONTAINS "tickets-hcs.com" OR sourcehostname CONTAINS "club-morze.com" OR sourcehostname CONTAINS "eurofootball-tickets.com" OR sourcehostname CONTAINS "tickets-mmd.com" OR sourcehostname CONTAINS "cska-kassa.com" OR sourcehostname CONTAINS "events-ge.com" OR sourcehostname CONTAINS "fc-dynamo-moscow.ru" OR sourcehostname CONTAINS "gldnmask.com" OR sourcehostname CONTAINS "kskarena.com" OR sourcehostname CONTAINS "tickets-big-love-show.com" OR sourcehostname CONTAINS "arenakazan.ru" OR sourcehostname CONTAINS "cska-basket.ru" OR sourcehostname CONTAINS "dkzh-nsk.ru" OR sourcehostname CONTAINS "luzhniki-afisha.com" OR sourcehostname CONTAINS "tyuz-spb.com" OR sourcehostname CONTAINS "tickets-az.com" OR sourcehostname CONTAINS "anna-karenina.ru" OR sourcehostname CONTAINS "crocus-concerthall.ru" OR sourcehostname CONTAINS "gazarena.ru" OR sourcehostname CONTAINS "gazarena.spb.ru" OR sourcehostname CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dram-teatr-krd.com" OR destinationntdomain CONTAINS "almaty-arena.com" OR destinationntdomain CONTAINS "fc-akron.com" OR destinationntdomain CONTAINS "ice-shows.ru" OR destinationntdomain CONTAINS "arena-tractor.com" OR destinationntdomain CONTAINS "autodrom-igora.com" OR destinationntdomain CONTAINS "dance-kubok-mira.com" OR destinationntdomain CONTAINS "fcrubin-kassa.ru" OR destinationntdomain CONTAINS "harry-styles.ru" OR destinationntdomain CONTAINS "hcsochi-tickets.ru" OR destinationntdomain CONTAINS "luzhniki-kassa.com" OR destinationntdomain CONTAINS "mainstage-kassa.com" OR destinationntdomain CONTAINS "moulinrouge-kabare.com" OR destinationntdomain CONTAINS "napokrovke.com" OR destinationntdomain CONTAINS "newwave-tickets.ru" OR destinationntdomain CONTAINS "russkayapesnya.ru" OR destinationntdomain CONTAINS "saburovnurlan.ru" OR destinationntdomain CONTAINS "concert-onyx.com" OR destinationntdomain CONTAINS "annaasti-concert.ru" OR destinationntdomain CONTAINS "cropp-arena.ru" OR destinationntdomain CONTAINS "diana-vishneva.com" OR destinationntdomain CONTAINS "eurofootballchamp.com" OR destinationntdomain CONTAINS "fctambov.com" OR destinationntdomain CONTAINS "fight-tickets.ru" OR destinationntdomain CONTAINS "kpokyc-kacca.ru" OR destinationntdomain CONTAINS "mossovetafisa.ru" OR destinationntdomain CONTAINS "newwavesochi.com" OR destinationntdomain CONTAINS "satire-afisha.ru" OR destinationntdomain CONTAINS "standupbilet.com" OR destinationntdomain CONTAINS "tickets-hcs.com" OR destinationntdomain CONTAINS "club-morze.com" OR destinationntdomain CONTAINS "eurofootball-tickets.com" OR destinationntdomain CONTAINS "tickets-mmd.com" OR destinationntdomain CONTAINS "cska-kassa.com" OR destinationntdomain CONTAINS "events-ge.com" OR destinationntdomain CONTAINS "fc-dynamo-moscow.ru" OR destinationntdomain CONTAINS "gldnmask.com" OR destinationntdomain CONTAINS "kskarena.com" OR destinationntdomain CONTAINS "tickets-big-love-show.com" OR destinationntdomain CONTAINS "arenakazan.ru" OR destinationntdomain CONTAINS "cska-basket.ru" OR destinationntdomain CONTAINS "dkzh-nsk.ru" OR destinationntdomain CONTAINS "luzhniki-afisha.com" OR destinationntdomain CONTAINS "tyuz-spb.com" OR destinationntdomain CONTAINS "tickets-az.com" OR destinationntdomain CONTAINS "anna-karenina.ru" OR destinationntdomain CONTAINS "crocus-concerthall.ru" OR destinationntdomain CONTAINS "gazarena.ru" OR destinationntdomain CONTAINS "gazarena.spb.ru" OR destinationntdomain CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "dram-teatr-krd.com" OR requesturl CONTAINS "almaty-arena.com" OR requesturl CONTAINS "fc-akron.com" OR requesturl CONTAINS "ice-shows.ru" OR requesturl CONTAINS "arena-tractor.com" OR requesturl CONTAINS "autodrom-igora.com" OR requesturl CONTAINS "dance-kubok-mira.com" OR requesturl CONTAINS "fcrubin-kassa.ru" OR requesturl CONTAINS "harry-styles.ru" OR requesturl CONTAINS "hcsochi-tickets.ru" OR requesturl CONTAINS "luzhniki-kassa.com" OR requesturl CONTAINS "mainstage-kassa.com" OR requesturl CONTAINS "moulinrouge-kabare.com" OR requesturl CONTAINS "napokrovke.com" OR requesturl CONTAINS "newwave-tickets.ru" OR requesturl CONTAINS "russkayapesnya.ru" OR requesturl CONTAINS "saburovnurlan.ru" OR requesturl CONTAINS "concert-onyx.com" OR requesturl CONTAINS "annaasti-concert.ru" OR requesturl CONTAINS "cropp-arena.ru" OR requesturl CONTAINS "diana-vishneva.com" OR requesturl CONTAINS "eurofootballchamp.com" OR requesturl CONTAINS "fctambov.com" OR requesturl CONTAINS "fight-tickets.ru" OR requesturl CONTAINS "kpokyc-kacca.ru" OR requesturl CONTAINS "mossovetafisa.ru" OR requesturl CONTAINS "newwavesochi.com" OR requesturl CONTAINS "satire-afisha.ru" OR requesturl CONTAINS "standupbilet.com" OR requesturl CONTAINS "tickets-hcs.com" OR requesturl CONTAINS "club-morze.com" OR requesturl CONTAINS "eurofootball-tickets.com" OR requesturl CONTAINS "tickets-mmd.com" OR requesturl CONTAINS "cska-kassa.com" OR requesturl CONTAINS "events-ge.com" OR requesturl CONTAINS "fc-dynamo-moscow.ru" OR requesturl CONTAINS "gldnmask.com" OR requesturl CONTAINS "kskarena.com" OR requesturl CONTAINS "tickets-big-love-show.com" OR requesturl CONTAINS "arenakazan.ru" OR requesturl CONTAINS "cska-basket.ru" OR requesturl CONTAINS "dkzh-nsk.ru" OR requesturl CONTAINS "luzhniki-afisha.com" OR requesturl CONTAINS "tyuz-spb.com" OR requesturl CONTAINS "tickets-az.com" OR requesturl CONTAINS "anna-karenina.ru" OR requesturl CONTAINS "crocus-concerthall.ru" OR requesturl CONTAINS "gazarena.ru" OR requesturl CONTAINS "gazarena.spb.ru" OR requesturl CONTAINS "humo-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tashkentpalace.com" OR destinationhostname CONTAINS "turkiston-palace.com" OR destinationhostname CONTAINS "turkey-tickets.com" OR destinationhostname CONTAINS "afisha-bkz.spb.ru" OR destinationhostname CONTAINS "afisha-dkyauza.ru" OR destinationhostname CONTAINS "afisha-tbtheatre.ru" OR destinationhostname CONTAINS "dachanabali.ru" OR destinationhostname CONTAINS "kassa-muzcomedy.com" OR destinationhostname CONTAINS "kiss-concert.com" OR destinationhostname CONTAINS "labconcert.ru" OR destinationhostname CONTAINS "lukoil-arena.com" OR destinationhostname CONTAINS "moscow-arena.com" OR destinationhostname CONTAINS "mossovet-afisa.ru" OR destinationhostname CONTAINS "opera-uae.com" OR destinationhostname CONTAINS "sm-tickets.com" OR destinationhostname CONTAINS "yubi-bilet.ru" OR destinationhostname CONTAINS "afisha-shaman.com" OR destinationhostname CONTAINS "brunomars-ticket.com" OR destinationhostname CONTAINS "iceberg-kassa.ru" OR destinationhostname CONTAINS "krilya-sovetov.com" OR destinationhostname CONTAINS "museum.spb.ru" OR destinationhostname CONTAINS "musichtheatre.com" OR destinationhostname CONTAINS "ticketsfootball.club" OR destinationhostname CONTAINS "kazan-arena.com" OR destinationhostname CONTAINS "afisha-lentheatre.ru" OR destinationhostname CONTAINS "afisha-mtheter.ru" OR destinationhostname CONTAINS "afisha-rptheatre.ru" OR destinationhostname CONTAINS "afishashufu.com" OR destinationhostname CONTAINS "currentzis-teodor.com" OR destinationhostname CONTAINS "ekb-afisha.ru" OR destinationhostname CONTAINS "grammofon.com.ru" OR destinationhostname CONTAINS "grammofon-tickets.ru" OR destinationhostname CONTAINS "krd-croparena.ru" OR destinationhostname CONTAINS "livehall-ekb.ru" OR destinationhostname CONTAINS "lokomotive-basket.ru" OR destinationhostname CONTAINS "ludovicoeinaudi-afisha.com" OR destinationhostname CONTAINS "olimpark-sochi.ru" OR destinationhostname CONTAINS "pesnya-goda.com" OR destinationhostname CONTAINS "robbiewilliams-tickets.com" OR destinationhostname CONTAINS "sochi-circus.com" OR destinationhostname CONTAINS "ticket-allstarday.ru" OR destinationhostname CONTAINS "vegastick.com" OR destinationhostname CONTAINS "kznarena.ru" OR destinationhostname CONTAINS "loko-hockey.com" OR destinationhostname CONTAINS "te-tickets.ru" OR destinationhostname CONTAINS "ticket-fcz.com" OR destinationhostname CONTAINS "tickets-spartak.com" OR destinationhostname CONTAINS "13-d.ru" OR destinationhostname CONTAINS "afishapharaoh.ru" OR destinationhostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tashkentpalace.com" OR sourcentdomain CONTAINS "turkiston-palace.com" OR sourcentdomain CONTAINS "turkey-tickets.com" OR sourcentdomain CONTAINS "afisha-bkz.spb.ru" OR sourcentdomain CONTAINS "afisha-dkyauza.ru" OR sourcentdomain CONTAINS "afisha-tbtheatre.ru" OR sourcentdomain CONTAINS "dachanabali.ru" OR sourcentdomain CONTAINS "kassa-muzcomedy.com" OR sourcentdomain CONTAINS "kiss-concert.com" OR sourcentdomain CONTAINS "labconcert.ru" OR sourcentdomain CONTAINS "lukoil-arena.com" OR sourcentdomain CONTAINS "moscow-arena.com" OR sourcentdomain CONTAINS "mossovet-afisa.ru" OR sourcentdomain CONTAINS "opera-uae.com" OR sourcentdomain CONTAINS "sm-tickets.com" OR sourcentdomain CONTAINS "yubi-bilet.ru" OR sourcentdomain CONTAINS "afisha-shaman.com" OR sourcentdomain CONTAINS "brunomars-ticket.com" OR sourcentdomain CONTAINS "iceberg-kassa.ru" OR sourcentdomain CONTAINS "krilya-sovetov.com" OR sourcentdomain CONTAINS "museum.spb.ru" OR sourcentdomain CONTAINS "musichtheatre.com" OR sourcentdomain CONTAINS "ticketsfootball.club" OR sourcentdomain CONTAINS "kazan-arena.com" OR sourcentdomain CONTAINS "afisha-lentheatre.ru" OR sourcentdomain CONTAINS "afisha-mtheter.ru" OR sourcentdomain CONTAINS "afisha-rptheatre.ru" OR sourcentdomain CONTAINS "afishashufu.com" OR sourcentdomain CONTAINS "currentzis-teodor.com" OR sourcentdomain CONTAINS "ekb-afisha.ru" OR sourcentdomain CONTAINS "grammofon.com.ru" OR sourcentdomain CONTAINS "grammofon-tickets.ru" OR sourcentdomain CONTAINS "krd-croparena.ru" OR sourcentdomain CONTAINS "livehall-ekb.ru" OR sourcentdomain CONTAINS "lokomotive-basket.ru" OR sourcentdomain CONTAINS "ludovicoeinaudi-afisha.com" OR sourcentdomain CONTAINS "olimpark-sochi.ru" OR sourcentdomain CONTAINS "pesnya-goda.com" OR sourcentdomain CONTAINS "robbiewilliams-tickets.com" OR sourcentdomain CONTAINS "sochi-circus.com" OR sourcentdomain CONTAINS "ticket-allstarday.ru" OR sourcentdomain CONTAINS "vegastick.com" OR sourcentdomain CONTAINS "kznarena.ru" OR sourcentdomain CONTAINS "loko-hockey.com" OR sourcentdomain CONTAINS "te-tickets.ru" OR sourcentdomain CONTAINS "ticket-fcz.com" OR sourcentdomain CONTAINS "tickets-spartak.com" OR sourcentdomain CONTAINS "13-d.ru" OR sourcentdomain CONTAINS "afishapharaoh.ru" OR sourcentdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tashkentpalace.com" OR sourcehostname CONTAINS "turkiston-palace.com" OR sourcehostname CONTAINS "turkey-tickets.com" OR sourcehostname CONTAINS "afisha-bkz.spb.ru" OR sourcehostname CONTAINS "afisha-dkyauza.ru" OR sourcehostname CONTAINS "afisha-tbtheatre.ru" OR sourcehostname CONTAINS "dachanabali.ru" OR sourcehostname CONTAINS "kassa-muzcomedy.com" OR sourcehostname CONTAINS "kiss-concert.com" OR sourcehostname CONTAINS "labconcert.ru" OR sourcehostname CONTAINS "lukoil-arena.com" OR sourcehostname CONTAINS "moscow-arena.com" OR sourcehostname CONTAINS "mossovet-afisa.ru" OR sourcehostname CONTAINS "opera-uae.com" OR sourcehostname CONTAINS "sm-tickets.com" OR sourcehostname CONTAINS "yubi-bilet.ru" OR sourcehostname CONTAINS "afisha-shaman.com" OR sourcehostname CONTAINS "brunomars-ticket.com" OR sourcehostname CONTAINS "iceberg-kassa.ru" OR sourcehostname CONTAINS "krilya-sovetov.com" OR sourcehostname CONTAINS "museum.spb.ru" OR sourcehostname CONTAINS "musichtheatre.com" OR sourcehostname CONTAINS "ticketsfootball.club" OR sourcehostname CONTAINS "kazan-arena.com" OR sourcehostname CONTAINS "afisha-lentheatre.ru" OR sourcehostname CONTAINS "afisha-mtheter.ru" OR sourcehostname CONTAINS "afisha-rptheatre.ru" OR sourcehostname CONTAINS "afishashufu.com" OR sourcehostname CONTAINS "currentzis-teodor.com" OR sourcehostname CONTAINS "ekb-afisha.ru" OR sourcehostname CONTAINS "grammofon.com.ru" OR sourcehostname CONTAINS "grammofon-tickets.ru" OR sourcehostname CONTAINS "krd-croparena.ru" OR sourcehostname CONTAINS "livehall-ekb.ru" OR sourcehostname CONTAINS "lokomotive-basket.ru" OR sourcehostname CONTAINS "ludovicoeinaudi-afisha.com" OR sourcehostname CONTAINS "olimpark-sochi.ru" OR sourcehostname CONTAINS "pesnya-goda.com" OR sourcehostname CONTAINS "robbiewilliams-tickets.com" OR sourcehostname CONTAINS "sochi-circus.com" OR sourcehostname CONTAINS "ticket-allstarday.ru" OR sourcehostname CONTAINS "vegastick.com" OR sourcehostname CONTAINS "kznarena.ru" OR sourcehostname CONTAINS "loko-hockey.com" OR sourcehostname CONTAINS "te-tickets.ru" OR sourcehostname CONTAINS "ticket-fcz.com" OR sourcehostname CONTAINS "tickets-spartak.com" OR sourcehostname CONTAINS "13-d.ru" OR sourcehostname CONTAINS "afishapharaoh.ru" OR sourcehostname CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tashkentpalace.com" OR destinationntdomain CONTAINS "turkiston-palace.com" OR destinationntdomain CONTAINS "turkey-tickets.com" OR destinationntdomain CONTAINS "afisha-bkz.spb.ru" OR destinationntdomain CONTAINS "afisha-dkyauza.ru" OR destinationntdomain CONTAINS "afisha-tbtheatre.ru" OR destinationntdomain CONTAINS "dachanabali.ru" OR destinationntdomain CONTAINS "kassa-muzcomedy.com" OR destinationntdomain CONTAINS "kiss-concert.com" OR destinationntdomain CONTAINS "labconcert.ru" OR destinationntdomain CONTAINS "lukoil-arena.com" OR destinationntdomain CONTAINS "moscow-arena.com" OR destinationntdomain CONTAINS "mossovet-afisa.ru" OR destinationntdomain CONTAINS "opera-uae.com" OR destinationntdomain CONTAINS "sm-tickets.com" OR destinationntdomain CONTAINS "yubi-bilet.ru" OR destinationntdomain CONTAINS "afisha-shaman.com" OR destinationntdomain CONTAINS "brunomars-ticket.com" OR destinationntdomain CONTAINS "iceberg-kassa.ru" OR destinationntdomain CONTAINS "krilya-sovetov.com" OR destinationntdomain CONTAINS "museum.spb.ru" OR destinationntdomain CONTAINS "musichtheatre.com" OR destinationntdomain CONTAINS "ticketsfootball.club" OR destinationntdomain CONTAINS "kazan-arena.com" OR destinationntdomain CONTAINS "afisha-lentheatre.ru" OR destinationntdomain CONTAINS "afisha-mtheter.ru" OR destinationntdomain CONTAINS "afisha-rptheatre.ru" OR destinationntdomain CONTAINS "afishashufu.com" OR destinationntdomain CONTAINS "currentzis-teodor.com" OR destinationntdomain CONTAINS "ekb-afisha.ru" OR destinationntdomain CONTAINS "grammofon.com.ru" OR destinationntdomain CONTAINS "grammofon-tickets.ru" OR destinationntdomain CONTAINS "krd-croparena.ru" OR destinationntdomain CONTAINS "livehall-ekb.ru" OR destinationntdomain CONTAINS "lokomotive-basket.ru" OR destinationntdomain CONTAINS "ludovicoeinaudi-afisha.com" OR destinationntdomain CONTAINS "olimpark-sochi.ru" OR destinationntdomain CONTAINS "pesnya-goda.com" OR destinationntdomain CONTAINS "robbiewilliams-tickets.com" OR destinationntdomain CONTAINS "sochi-circus.com" OR destinationntdomain CONTAINS "ticket-allstarday.ru" OR destinationntdomain CONTAINS "vegastick.com" OR destinationntdomain CONTAINS "kznarena.ru" OR destinationntdomain CONTAINS "loko-hockey.com" OR destinationntdomain CONTAINS "te-tickets.ru" OR destinationntdomain CONTAINS "ticket-fcz.com" OR destinationntdomain CONTAINS "tickets-spartak.com" OR destinationntdomain CONTAINS "13-d.ru" OR destinationntdomain CONTAINS "afishapharaoh.ru" OR destinationntdomain CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "tashkentpalace.com" OR requesturl CONTAINS "turkiston-palace.com" OR requesturl CONTAINS "turkey-tickets.com" OR requesturl CONTAINS "afisha-bkz.spb.ru" OR requesturl CONTAINS "afisha-dkyauza.ru" OR requesturl CONTAINS "afisha-tbtheatre.ru" OR requesturl CONTAINS "dachanabali.ru" OR requesturl CONTAINS "kassa-muzcomedy.com" OR requesturl CONTAINS "kiss-concert.com" OR requesturl CONTAINS "labconcert.ru" OR requesturl CONTAINS "lukoil-arena.com" OR requesturl CONTAINS "moscow-arena.com" OR requesturl CONTAINS "mossovet-afisa.ru" OR requesturl CONTAINS "opera-uae.com" OR requesturl CONTAINS "sm-tickets.com" OR requesturl CONTAINS "yubi-bilet.ru" OR requesturl CONTAINS "afisha-shaman.com" OR requesturl CONTAINS "brunomars-ticket.com" OR requesturl CONTAINS "iceberg-kassa.ru" OR requesturl CONTAINS "krilya-sovetov.com" OR requesturl CONTAINS "museum.spb.ru" OR requesturl CONTAINS "musichtheatre.com" OR requesturl CONTAINS "ticketsfootball.club" OR requesturl CONTAINS "kazan-arena.com" OR requesturl CONTAINS "afisha-lentheatre.ru" OR requesturl CONTAINS "afisha-mtheter.ru" OR requesturl CONTAINS "afisha-rptheatre.ru" OR requesturl CONTAINS "afishashufu.com" OR requesturl CONTAINS "currentzis-teodor.com" OR requesturl CONTAINS "ekb-afisha.ru" OR requesturl CONTAINS "grammofon.com.ru" OR requesturl CONTAINS "grammofon-tickets.ru" OR requesturl CONTAINS "krd-croparena.ru" OR requesturl CONTAINS "livehall-ekb.ru" OR requesturl CONTAINS "lokomotive-basket.ru" OR requesturl CONTAINS "ludovicoeinaudi-afisha.com" OR requesturl CONTAINS "olimpark-sochi.ru" OR requesturl CONTAINS "pesnya-goda.com" OR requesturl CONTAINS "robbiewilliams-tickets.com" OR requesturl CONTAINS "sochi-circus.com" OR requesturl CONTAINS "ticket-allstarday.ru" OR requesturl CONTAINS "vegastick.com" OR requesturl CONTAINS "kznarena.ru" OR requesturl CONTAINS "loko-hockey.com" OR requesturl CONTAINS "te-tickets.ru" OR requesturl CONTAINS "ticket-fcz.com" OR requesturl CONTAINS "tickets-spartak.com" OR requesturl CONTAINS "13-d.ru" OR requesturl CONTAINS "afishapharaoh.ru" OR requesturl CONTAINS "arena-etihad.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "billieeilish-tour.com" OR destinationhostname CONTAINS "etcetera-tickets.ru" OR destinationhostname CONTAINS "fight-nights.ru" OR destinationhostname CONTAINS "formula1-tickets.com" OR destinationhostname CONTAINS "graf-orloff.ru" OR destinationhostname CONTAINS "gruppa-kino.com" OR destinationhostname CONTAINS "ivanvasilevich.ru" OR destinationhostname CONTAINS "junona-and-avos.ru" OR destinationhostname CONTAINS "live-arena-tickets.com" OR destinationhostname CONTAINS "loboda.com.ru" OR destinationhostname CONTAINS "mayakovskiiy.ru" OR destinationhostname CONTAINS "taganafisha.ru" OR destinationhostname CONTAINS "themastermargarita.ru" OR destinationhostname CONTAINS "ticket-euro2024.com" OR destinationhostname CONTAINS "ticketsevent-uae.com" OR destinationhostname CONTAINS "zemfira.com.ru" OR destinationhostname CONTAINS "zenit-ticket.com" OR destinationhostname CONTAINS "zimnii-teatr.ru" OR destinationhostname CONTAINS "afisha-mtheater.ru" OR destinationhostname CONTAINS "arena-dinamo.ru" OR destinationhostname CONTAINS "arena-fcz.spb.ru" OR destinationhostname CONTAINS "arena-skk.ru" OR destinationhostname CONTAINS "dinamobt-ge.com" OR destinationhostname CONTAINS "grigoriy-leps.com" OR destinationhostname CONTAINS "komissartheatre.com" OR destinationhostname CONTAINS "maks-korzh.com" OR destinationhostname CONTAINS "mhat-art-theatre.ru" OR destinationhostname CONTAINS "operanorma.ru" OR destinationhostname CONTAINS "portalbilet.kz" OR destinationhostname CONTAINS "sochi-afisha.com" OR destinationhostname CONTAINS "tickethockey.com" OR destinationhostname CONTAINS "ticket-uz.com" OR destinationhostname CONTAINS "xkcska.ru" OR destinationhostname CONTAINS "ticketafisha.com" OR destinationhostname CONTAINS "tkt-rs.com" OR destinationhostname CONTAINS "a2-tickets.ru" OR destinationhostname CONTAINS "allstarday.ru" OR destinationhostname CONTAINS "arena-abudhabi.com" OR destinationhostname CONTAINS "currentzis-afisha.com" OR destinationhostname CONTAINS "dinamo-hockey.ru" OR destinationhostname CONTAINS "pbilet.net" OR destinationhostname CONTAINS "redarena-afisha.ru" OR destinationhostname CONTAINS "ticketeventbali.com" OR destinationhostname CONTAINS "ticketeventthai.com" OR destinationhostname CONTAINS "btheatre.spb.ru" OR destinationhostname CONTAINS "hc-salavat.ru" OR destinationhostname CONTAINS "jah-khalib.com" OR destinationhostname CONTAINS "khl-kazan.ru" OR destinationhostname CONTAINS "krskarena.com" OR destinationhostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "billieeilish-tour.com" OR sourcentdomain CONTAINS "etcetera-tickets.ru" OR sourcentdomain CONTAINS "fight-nights.ru" OR sourcentdomain CONTAINS "formula1-tickets.com" OR sourcentdomain CONTAINS "graf-orloff.ru" OR sourcentdomain CONTAINS "gruppa-kino.com" OR sourcentdomain CONTAINS "ivanvasilevich.ru" OR sourcentdomain CONTAINS "junona-and-avos.ru" OR sourcentdomain CONTAINS "live-arena-tickets.com" OR sourcentdomain CONTAINS "loboda.com.ru" OR sourcentdomain CONTAINS "mayakovskiiy.ru" OR sourcentdomain CONTAINS "taganafisha.ru" OR sourcentdomain CONTAINS "themastermargarita.ru" OR sourcentdomain CONTAINS "ticket-euro2024.com" OR sourcentdomain CONTAINS "ticketsevent-uae.com" OR sourcentdomain CONTAINS "zemfira.com.ru" OR sourcentdomain CONTAINS "zenit-ticket.com" OR sourcentdomain CONTAINS "zimnii-teatr.ru" OR sourcentdomain CONTAINS "afisha-mtheater.ru" OR sourcentdomain CONTAINS "arena-dinamo.ru" OR sourcentdomain CONTAINS "arena-fcz.spb.ru" OR sourcentdomain CONTAINS "arena-skk.ru" OR sourcentdomain CONTAINS "dinamobt-ge.com" OR sourcentdomain CONTAINS "grigoriy-leps.com" OR sourcentdomain CONTAINS "komissartheatre.com" OR sourcentdomain CONTAINS "maks-korzh.com" OR sourcentdomain CONTAINS "mhat-art-theatre.ru" OR sourcentdomain CONTAINS "operanorma.ru" OR sourcentdomain CONTAINS "portalbilet.kz" OR sourcentdomain CONTAINS "sochi-afisha.com" OR sourcentdomain CONTAINS "tickethockey.com" OR sourcentdomain CONTAINS "ticket-uz.com" OR sourcentdomain CONTAINS "xkcska.ru" OR sourcentdomain CONTAINS "ticketafisha.com" OR sourcentdomain CONTAINS "tkt-rs.com" OR sourcentdomain CONTAINS "a2-tickets.ru" OR sourcentdomain CONTAINS "allstarday.ru" OR sourcentdomain CONTAINS "arena-abudhabi.com" OR sourcentdomain CONTAINS "currentzis-afisha.com" OR sourcentdomain CONTAINS "dinamo-hockey.ru" OR sourcentdomain CONTAINS "pbilet.net" OR sourcentdomain CONTAINS "redarena-afisha.ru" OR sourcentdomain CONTAINS "ticketeventbali.com" OR sourcentdomain CONTAINS "ticketeventthai.com" OR sourcentdomain CONTAINS "btheatre.spb.ru" OR sourcentdomain CONTAINS "hc-salavat.ru" OR sourcentdomain CONTAINS "jah-khalib.com" OR sourcentdomain CONTAINS "khl-kazan.ru" OR sourcentdomain CONTAINS "krskarena.com" OR sourcentdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "billieeilish-tour.com" OR sourcehostname CONTAINS "etcetera-tickets.ru" OR sourcehostname CONTAINS "fight-nights.ru" OR sourcehostname CONTAINS "formula1-tickets.com" OR sourcehostname CONTAINS "graf-orloff.ru" OR sourcehostname CONTAINS "gruppa-kino.com" OR sourcehostname CONTAINS "ivanvasilevich.ru" OR sourcehostname CONTAINS "junona-and-avos.ru" OR sourcehostname CONTAINS "live-arena-tickets.com" OR sourcehostname CONTAINS "loboda.com.ru" OR sourcehostname CONTAINS "mayakovskiiy.ru" OR sourcehostname CONTAINS "taganafisha.ru" OR sourcehostname CONTAINS "themastermargarita.ru" OR sourcehostname CONTAINS "ticket-euro2024.com" OR sourcehostname CONTAINS "ticketsevent-uae.com" OR sourcehostname CONTAINS "zemfira.com.ru" OR sourcehostname CONTAINS "zenit-ticket.com" OR sourcehostname CONTAINS "zimnii-teatr.ru" OR sourcehostname CONTAINS "afisha-mtheater.ru" OR sourcehostname CONTAINS "arena-dinamo.ru" OR sourcehostname CONTAINS "arena-fcz.spb.ru" OR sourcehostname CONTAINS "arena-skk.ru" OR sourcehostname CONTAINS "dinamobt-ge.com" OR sourcehostname CONTAINS "grigoriy-leps.com" OR sourcehostname CONTAINS "komissartheatre.com" OR sourcehostname CONTAINS "maks-korzh.com" OR sourcehostname CONTAINS "mhat-art-theatre.ru" OR sourcehostname CONTAINS "operanorma.ru" OR sourcehostname CONTAINS "portalbilet.kz" OR sourcehostname CONTAINS "sochi-afisha.com" OR sourcehostname CONTAINS "tickethockey.com" OR sourcehostname CONTAINS "ticket-uz.com" OR sourcehostname CONTAINS "xkcska.ru" OR sourcehostname CONTAINS "ticketafisha.com" OR sourcehostname CONTAINS "tkt-rs.com" OR sourcehostname CONTAINS "a2-tickets.ru" OR sourcehostname CONTAINS "allstarday.ru" OR sourcehostname CONTAINS "arena-abudhabi.com" OR sourcehostname CONTAINS "currentzis-afisha.com" OR sourcehostname CONTAINS "dinamo-hockey.ru" OR sourcehostname CONTAINS "pbilet.net" OR sourcehostname CONTAINS "redarena-afisha.ru" OR sourcehostname CONTAINS "ticketeventbali.com" OR sourcehostname CONTAINS "ticketeventthai.com" OR sourcehostname CONTAINS "btheatre.spb.ru" OR sourcehostname CONTAINS "hc-salavat.ru" OR sourcehostname CONTAINS "jah-khalib.com" OR sourcehostname CONTAINS "khl-kazan.ru" OR sourcehostname CONTAINS "krskarena.com" OR sourcehostname CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "billieeilish-tour.com" OR destinationntdomain CONTAINS "etcetera-tickets.ru" OR destinationntdomain CONTAINS "fight-nights.ru" OR destinationntdomain CONTAINS "formula1-tickets.com" OR destinationntdomain CONTAINS "graf-orloff.ru" OR destinationntdomain CONTAINS "gruppa-kino.com" OR destinationntdomain CONTAINS "ivanvasilevich.ru" OR destinationntdomain CONTAINS "junona-and-avos.ru" OR destinationntdomain CONTAINS "live-arena-tickets.com" OR destinationntdomain CONTAINS "loboda.com.ru" OR destinationntdomain CONTAINS "mayakovskiiy.ru" OR destinationntdomain CONTAINS "taganafisha.ru" OR destinationntdomain CONTAINS "themastermargarita.ru" OR destinationntdomain CONTAINS "ticket-euro2024.com" OR destinationntdomain CONTAINS "ticketsevent-uae.com" OR destinationntdomain CONTAINS "zemfira.com.ru" OR destinationntdomain CONTAINS "zenit-ticket.com" OR destinationntdomain CONTAINS "zimnii-teatr.ru" OR destinationntdomain CONTAINS "afisha-mtheater.ru" OR destinationntdomain CONTAINS "arena-dinamo.ru" OR destinationntdomain CONTAINS "arena-fcz.spb.ru" OR destinationntdomain CONTAINS "arena-skk.ru" OR destinationntdomain CONTAINS "dinamobt-ge.com" OR destinationntdomain CONTAINS "grigoriy-leps.com" OR destinationntdomain CONTAINS "komissartheatre.com" OR destinationntdomain CONTAINS "maks-korzh.com" OR destinationntdomain CONTAINS "mhat-art-theatre.ru" OR destinationntdomain CONTAINS "operanorma.ru" OR destinationntdomain CONTAINS "portalbilet.kz" OR destinationntdomain CONTAINS "sochi-afisha.com" OR destinationntdomain CONTAINS "tickethockey.com" OR destinationntdomain CONTAINS "ticket-uz.com" OR destinationntdomain CONTAINS "xkcska.ru" OR destinationntdomain CONTAINS "ticketafisha.com" OR destinationntdomain CONTAINS "tkt-rs.com" OR destinationntdomain CONTAINS "a2-tickets.ru" OR destinationntdomain CONTAINS "allstarday.ru" OR destinationntdomain CONTAINS "arena-abudhabi.com" OR destinationntdomain CONTAINS "currentzis-afisha.com" OR destinationntdomain CONTAINS "dinamo-hockey.ru" OR destinationntdomain CONTAINS "pbilet.net" OR destinationntdomain CONTAINS "redarena-afisha.ru" OR destinationntdomain CONTAINS "ticketeventbali.com" OR destinationntdomain CONTAINS "ticketeventthai.com" OR destinationntdomain CONTAINS "btheatre.spb.ru" OR destinationntdomain CONTAINS "hc-salavat.ru" OR destinationntdomain CONTAINS "jah-khalib.com" OR destinationntdomain CONTAINS "khl-kazan.ru" OR destinationntdomain CONTAINS "krskarena.com" OR destinationntdomain CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "billieeilish-tour.com" OR requesturl CONTAINS "etcetera-tickets.ru" OR requesturl CONTAINS "fight-nights.ru" OR requesturl CONTAINS "formula1-tickets.com" OR requesturl CONTAINS "graf-orloff.ru" OR requesturl CONTAINS "gruppa-kino.com" OR requesturl CONTAINS "ivanvasilevich.ru" OR requesturl CONTAINS "junona-and-avos.ru" OR requesturl CONTAINS "live-arena-tickets.com" OR requesturl CONTAINS "loboda.com.ru" OR requesturl CONTAINS "mayakovskiiy.ru" OR requesturl CONTAINS "taganafisha.ru" OR requesturl CONTAINS "themastermargarita.ru" OR requesturl CONTAINS "ticket-euro2024.com" OR requesturl CONTAINS "ticketsevent-uae.com" OR requesturl CONTAINS "zemfira.com.ru" OR requesturl CONTAINS "zenit-ticket.com" OR requesturl CONTAINS "zimnii-teatr.ru" OR requesturl CONTAINS "afisha-mtheater.ru" OR requesturl CONTAINS "arena-dinamo.ru" OR requesturl CONTAINS "arena-fcz.spb.ru" OR requesturl CONTAINS "arena-skk.ru" OR requesturl CONTAINS "dinamobt-ge.com" OR requesturl CONTAINS "grigoriy-leps.com" OR requesturl CONTAINS "komissartheatre.com" OR requesturl CONTAINS "maks-korzh.com" OR requesturl CONTAINS "mhat-art-theatre.ru" OR requesturl CONTAINS "operanorma.ru" OR requesturl CONTAINS "portalbilet.kz" OR requesturl CONTAINS "sochi-afisha.com" OR requesturl CONTAINS "tickethockey.com" OR requesturl CONTAINS "ticket-uz.com" OR requesturl CONTAINS "xkcska.ru" OR requesturl CONTAINS "ticketafisha.com" OR requesturl CONTAINS "tkt-rs.com" OR requesturl CONTAINS "a2-tickets.ru" OR requesturl CONTAINS "allstarday.ru" OR requesturl CONTAINS "arena-abudhabi.com" OR requesturl CONTAINS "currentzis-afisha.com" OR requesturl CONTAINS "dinamo-hockey.ru" OR requesturl CONTAINS "pbilet.net" OR requesturl CONTAINS "redarena-afisha.ru" OR requesturl CONTAINS "ticketeventbali.com" OR requesturl CONTAINS "ticketeventthai.com" OR requesturl CONTAINS "btheatre.spb.ru" OR requesturl CONTAINS "hc-salavat.ru" OR requesturl CONTAINS "jah-khalib.com" OR requesturl CONTAINS "khl-kazan.ru" OR requesturl CONTAINS "krskarena.com" OR requesturl CONTAINS "tractor-arena.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gel-afisha.ru" OR destinationhostname CONTAINS "krd-afisha.ru" OR destinationhostname CONTAINS "poluninink.ru" OR destinationhostname CONTAINS "rubin-kassa.com" OR destinationhostname CONTAINS "afisha-gazmanov.com" OR destinationhostname CONTAINS "afisha-piknik.ru" OR destinationhostname CONTAINS "akimkomtheatre.com" OR destinationhostname CONTAINS "circus-tickets.ru" OR destinationhostname CONTAINS "concert-shaman.ru" OR destinationhostname CONTAINS "festivalnii.com" OR destinationhostname CONTAINS "hcspartak.moscow" OR destinationhostname CONTAINS "icepalace-kassa.ru" OR destinationhostname CONTAINS "kolbasnyytseh.ru" OR destinationhostname CONTAINS "kvitkifootball.com.ua" OR destinationhostname CONTAINS "mirtheatre.com" OR destinationhostname CONTAINS "noizemc-tickets.com" OR destinationhostname CONTAINS "resalerugby.com" OR destinationhostname CONTAINS "resalerugby2023.com" OR destinationhostname CONTAINS "rotor-ticket.ru" OR destinationhostname CONTAINS "snoopdogg-tickets.com" OR destinationhostname CONTAINS "bi2-ticket.ru" OR destinationhostname CONTAINS "cirknikulina.ru" OR destinationhostname CONTAINS "cirkusnikulin.com" OR destinationhostname CONTAINS "greatcirkus.com" OR destinationhostname CONTAINS "icepalace-ticket.ru" OR destinationhostname CONTAINS "kz-zaryadye.ru" OR destinationhostname CONTAINS "newyearbilet.com" OR destinationhostname CONTAINS "orlovsergtour.ru" OR destinationhostname CONTAINS "veb-arena.com" OR destinationhostname CONTAINS "ygolok-durova.com" OR destinationhostname CONTAINS "afisha-astudio.com" OR destinationhostname CONTAINS "fcz-tickets.ru" OR destinationhostname CONTAINS "hcspartak.org" OR destinationhostname CONTAINS "kckafisha.ru" OR destinationhostname CONTAINS "cska-footballclub.ru" OR destinationhostname CONTAINS "events-pl.com" OR destinationhostname CONTAINS "hc-cska.ru" OR destinationhostname CONTAINS "ice-arenatula.com" OR destinationhostname CONTAINS "pbilet.tech" OR destinationhostname CONTAINS "teatr-mosovet.ru" OR destinationhostname CONTAINS "zenit-basket.ru" OR destinationhostname CONTAINS "ticketufc.com" OR destinationhostname CONTAINS "afisha-maly.com" OR destinationhostname CONTAINS "ufc-tickets.ru" OR destinationhostname CONTAINS "afishalolita.ru" OR destinationhostname CONTAINS "grandcircus.ru" OR destinationhostname CONTAINS "hcs-ticket.ru" OR destinationhostname CONTAINS "oxxxy-tour.com" OR destinationhostname CONTAINS "rusptheater.ru" OR destinationhostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gel-afisha.ru" OR sourcentdomain CONTAINS "krd-afisha.ru" OR sourcentdomain CONTAINS "poluninink.ru" OR sourcentdomain CONTAINS "rubin-kassa.com" OR sourcentdomain CONTAINS "afisha-gazmanov.com" OR sourcentdomain CONTAINS "afisha-piknik.ru" OR sourcentdomain CONTAINS "akimkomtheatre.com" OR sourcentdomain CONTAINS "circus-tickets.ru" OR sourcentdomain CONTAINS "concert-shaman.ru" OR sourcentdomain CONTAINS "festivalnii.com" OR sourcentdomain CONTAINS "hcspartak.moscow" OR sourcentdomain CONTAINS "icepalace-kassa.ru" OR sourcentdomain CONTAINS "kolbasnyytseh.ru" OR sourcentdomain CONTAINS "kvitkifootball.com.ua" OR sourcentdomain CONTAINS "mirtheatre.com" OR sourcentdomain CONTAINS "noizemc-tickets.com" OR sourcentdomain CONTAINS "resalerugby.com" OR sourcentdomain CONTAINS "resalerugby2023.com" OR sourcentdomain CONTAINS "rotor-ticket.ru" OR sourcentdomain CONTAINS "snoopdogg-tickets.com" OR sourcentdomain CONTAINS "bi2-ticket.ru" OR sourcentdomain CONTAINS "cirknikulina.ru" OR sourcentdomain CONTAINS "cirkusnikulin.com" OR sourcentdomain CONTAINS "greatcirkus.com" OR sourcentdomain CONTAINS "icepalace-ticket.ru" OR sourcentdomain CONTAINS "kz-zaryadye.ru" OR sourcentdomain CONTAINS "newyearbilet.com" OR sourcentdomain CONTAINS "orlovsergtour.ru" OR sourcentdomain CONTAINS "veb-arena.com" OR sourcentdomain CONTAINS "ygolok-durova.com" OR sourcentdomain CONTAINS "afisha-astudio.com" OR sourcentdomain CONTAINS "fcz-tickets.ru" OR sourcentdomain CONTAINS "hcspartak.org" OR sourcentdomain CONTAINS "kckafisha.ru" OR sourcentdomain CONTAINS "cska-footballclub.ru" OR sourcentdomain CONTAINS "events-pl.com" OR sourcentdomain CONTAINS "hc-cska.ru" OR sourcentdomain CONTAINS "ice-arenatula.com" OR sourcentdomain CONTAINS "pbilet.tech" OR sourcentdomain CONTAINS "teatr-mosovet.ru" OR sourcentdomain CONTAINS "zenit-basket.ru" OR sourcentdomain CONTAINS "ticketufc.com" OR sourcentdomain CONTAINS "afisha-maly.com" OR sourcentdomain CONTAINS "ufc-tickets.ru" OR sourcentdomain CONTAINS "afishalolita.ru" OR sourcentdomain CONTAINS "grandcircus.ru" OR sourcentdomain CONTAINS "hcs-ticket.ru" OR sourcentdomain CONTAINS "oxxxy-tour.com" OR sourcentdomain CONTAINS "rusptheater.ru" OR sourcentdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gel-afisha.ru" OR sourcehostname CONTAINS "krd-afisha.ru" OR sourcehostname CONTAINS "poluninink.ru" OR sourcehostname CONTAINS "rubin-kassa.com" OR sourcehostname CONTAINS "afisha-gazmanov.com" OR sourcehostname CONTAINS "afisha-piknik.ru" OR sourcehostname CONTAINS "akimkomtheatre.com" OR sourcehostname CONTAINS "circus-tickets.ru" OR sourcehostname CONTAINS "concert-shaman.ru" OR sourcehostname CONTAINS "festivalnii.com" OR sourcehostname CONTAINS "hcspartak.moscow" OR sourcehostname CONTAINS "icepalace-kassa.ru" OR sourcehostname CONTAINS "kolbasnyytseh.ru" OR sourcehostname CONTAINS "kvitkifootball.com.ua" OR sourcehostname CONTAINS "mirtheatre.com" OR sourcehostname CONTAINS "noizemc-tickets.com" OR sourcehostname CONTAINS "resalerugby.com" OR sourcehostname CONTAINS "resalerugby2023.com" OR sourcehostname CONTAINS "rotor-ticket.ru" OR sourcehostname CONTAINS "snoopdogg-tickets.com" OR sourcehostname CONTAINS "bi2-ticket.ru" OR sourcehostname CONTAINS "cirknikulina.ru" OR sourcehostname CONTAINS "cirkusnikulin.com" OR sourcehostname CONTAINS "greatcirkus.com" OR sourcehostname CONTAINS "icepalace-ticket.ru" OR sourcehostname CONTAINS "kz-zaryadye.ru" OR sourcehostname CONTAINS "newyearbilet.com" OR sourcehostname CONTAINS "orlovsergtour.ru" OR sourcehostname CONTAINS "veb-arena.com" OR sourcehostname CONTAINS "ygolok-durova.com" OR sourcehostname CONTAINS "afisha-astudio.com" OR sourcehostname CONTAINS "fcz-tickets.ru" OR sourcehostname CONTAINS "hcspartak.org" OR sourcehostname CONTAINS "kckafisha.ru" OR sourcehostname CONTAINS "cska-footballclub.ru" OR sourcehostname CONTAINS "events-pl.com" OR sourcehostname CONTAINS "hc-cska.ru" OR sourcehostname CONTAINS "ice-arenatula.com" OR sourcehostname CONTAINS "pbilet.tech" OR sourcehostname CONTAINS "teatr-mosovet.ru" OR sourcehostname CONTAINS "zenit-basket.ru" OR sourcehostname CONTAINS "ticketufc.com" OR sourcehostname CONTAINS "afisha-maly.com" OR sourcehostname CONTAINS "ufc-tickets.ru" OR sourcehostname CONTAINS "afishalolita.ru" OR sourcehostname CONTAINS "grandcircus.ru" OR sourcehostname CONTAINS "hcs-ticket.ru" OR sourcehostname CONTAINS "oxxxy-tour.com" OR sourcehostname CONTAINS "rusptheater.ru" OR sourcehostname CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gel-afisha.ru" OR destinationntdomain CONTAINS "krd-afisha.ru" OR destinationntdomain CONTAINS "poluninink.ru" OR destinationntdomain CONTAINS "rubin-kassa.com" OR destinationntdomain CONTAINS "afisha-gazmanov.com" OR destinationntdomain CONTAINS "afisha-piknik.ru" OR destinationntdomain CONTAINS "akimkomtheatre.com" OR destinationntdomain CONTAINS "circus-tickets.ru" OR destinationntdomain CONTAINS "concert-shaman.ru" OR destinationntdomain CONTAINS "festivalnii.com" OR destinationntdomain CONTAINS "hcspartak.moscow" OR destinationntdomain CONTAINS "icepalace-kassa.ru" OR destinationntdomain CONTAINS "kolbasnyytseh.ru" OR destinationntdomain CONTAINS "kvitkifootball.com.ua" OR destinationntdomain CONTAINS "mirtheatre.com" OR destinationntdomain CONTAINS "noizemc-tickets.com" OR destinationntdomain CONTAINS "resalerugby.com" OR destinationntdomain CONTAINS "resalerugby2023.com" OR destinationntdomain CONTAINS "rotor-ticket.ru" OR destinationntdomain CONTAINS "snoopdogg-tickets.com" OR destinationntdomain CONTAINS "bi2-ticket.ru" OR destinationntdomain CONTAINS "cirknikulina.ru" OR destinationntdomain CONTAINS "cirkusnikulin.com" OR destinationntdomain CONTAINS "greatcirkus.com" OR destinationntdomain CONTAINS "icepalace-ticket.ru" OR destinationntdomain CONTAINS "kz-zaryadye.ru" OR destinationntdomain CONTAINS "newyearbilet.com" OR destinationntdomain CONTAINS "orlovsergtour.ru" OR destinationntdomain CONTAINS "veb-arena.com" OR destinationntdomain CONTAINS "ygolok-durova.com" OR destinationntdomain CONTAINS "afisha-astudio.com" OR destinationntdomain CONTAINS "fcz-tickets.ru" OR destinationntdomain CONTAINS "hcspartak.org" OR destinationntdomain CONTAINS "kckafisha.ru" OR destinationntdomain CONTAINS "cska-footballclub.ru" OR destinationntdomain CONTAINS "events-pl.com" OR destinationntdomain CONTAINS "hc-cska.ru" OR destinationntdomain CONTAINS "ice-arenatula.com" OR destinationntdomain CONTAINS "pbilet.tech" OR destinationntdomain CONTAINS "teatr-mosovet.ru" OR destinationntdomain CONTAINS "zenit-basket.ru" OR destinationntdomain CONTAINS "ticketufc.com" OR destinationntdomain CONTAINS "afisha-maly.com" OR destinationntdomain CONTAINS "ufc-tickets.ru" OR destinationntdomain CONTAINS "afishalolita.ru" OR destinationntdomain CONTAINS "grandcircus.ru" OR destinationntdomain CONTAINS "hcs-ticket.ru" OR destinationntdomain CONTAINS "oxxxy-tour.com" OR destinationntdomain CONTAINS "rusptheater.ru" OR destinationntdomain CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "gel-afisha.ru" OR requesturl CONTAINS "krd-afisha.ru" OR requesturl CONTAINS "poluninink.ru" OR requesturl CONTAINS "rubin-kassa.com" OR requesturl CONTAINS "afisha-gazmanov.com" OR requesturl CONTAINS "afisha-piknik.ru" OR requesturl CONTAINS "akimkomtheatre.com" OR requesturl CONTAINS "circus-tickets.ru" OR requesturl CONTAINS "concert-shaman.ru" OR requesturl CONTAINS "festivalnii.com" OR requesturl CONTAINS "hcspartak.moscow" OR requesturl CONTAINS "icepalace-kassa.ru" OR requesturl CONTAINS "kolbasnyytseh.ru" OR requesturl CONTAINS "kvitkifootball.com.ua" OR requesturl CONTAINS "mirtheatre.com" OR requesturl CONTAINS "noizemc-tickets.com" OR requesturl CONTAINS "resalerugby.com" OR requesturl CONTAINS "resalerugby2023.com" OR requesturl CONTAINS "rotor-ticket.ru" OR requesturl CONTAINS "snoopdogg-tickets.com" OR requesturl CONTAINS "bi2-ticket.ru" OR requesturl CONTAINS "cirknikulina.ru" OR requesturl CONTAINS "cirkusnikulin.com" OR requesturl CONTAINS "greatcirkus.com" OR requesturl CONTAINS "icepalace-ticket.ru" OR requesturl CONTAINS "kz-zaryadye.ru" OR requesturl CONTAINS "newyearbilet.com" OR requesturl CONTAINS "orlovsergtour.ru" OR requesturl CONTAINS "veb-arena.com" OR requesturl CONTAINS "ygolok-durova.com" OR requesturl CONTAINS "afisha-astudio.com" OR requesturl CONTAINS "fcz-tickets.ru" OR requesturl CONTAINS "hcspartak.org" OR requesturl CONTAINS "kckafisha.ru" OR requesturl CONTAINS "cska-footballclub.ru" OR requesturl CONTAINS "events-pl.com" OR requesturl CONTAINS "hc-cska.ru" OR requesturl CONTAINS "ice-arenatula.com" OR requesturl CONTAINS "pbilet.tech" OR requesturl CONTAINS "teatr-mosovet.ru" OR requesturl CONTAINS "zenit-basket.ru" OR requesturl CONTAINS "ticketufc.com" OR requesturl CONTAINS "afisha-maly.com" OR requesturl CONTAINS "ufc-tickets.ru" OR requesturl CONTAINS "afishalolita.ru" OR requesturl CONTAINS "grandcircus.ru" OR requesturl CONTAINS "hcs-ticket.ru" OR requesturl CONTAINS "oxxxy-tour.com" OR requesturl CONTAINS "rusptheater.ru" OR requesturl CONTAINS "splean-tickets.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tickets-event.com" OR destinationhostname CONTAINS "tickets-madonna.com" OR destinationhostname CONTAINS "zemfira.band" OR destinationhostname CONTAINS "afisha-alextheatre.com" OR destinationhostname CONTAINS "b2-tour.com" OR destinationhostname CONTAINS "afisha-alisa.com" OR destinationhostname CONTAINS "afishadtheatre.com" OR destinationhostname CONTAINS "afishamikhtheatre.com" OR destinationhostname CONTAINS "afisha-roof.ru" OR destinationhostname CONTAINS "childshow.ru" OR destinationhostname CONTAINS "cirkus-nikulina.ru" OR destinationhostname CONTAINS "etheatreballet.com" OR destinationhostname CONTAINS "exchange-tickets.com" OR destinationhostname CONTAINS "fcdynamo-kassa.com" OR destinationhostname CONTAINS "footballeurochamp.com" OR destinationhostname CONTAINS "goldenring-kassa.ru" OR destinationhostname CONTAINS "hc-avtomobilist.com" OR destinationhostname CONTAINS "lastochkaclub.com" OR destinationhostname CONTAINS "metallica-ticket.com" OR destinationhostname CONTAINS "newyearcircus.ru" OR destinationhostname CONTAINS "serozha-mxt.ru" OR destinationhostname CONTAINS "spartak-footballclub.com" OR destinationhostname CONTAINS "ticketska.ru" OR destinationhostname CONTAINS "tickets-piratestation.ru" OR destinationhostname CONTAINS "yubi-afisha.ru" OR destinationhostname CONTAINS "circus-am.com" OR destinationhostname CONTAINS "hc-lokomotiv.com" OR destinationhostname CONTAINS "novosib-expo.ru" OR destinationhostname CONTAINS "novosibirsk-arena.com" OR destinationhostname CONTAINS "ticketcircus.spb.ru" OR destinationhostname CONTAINS "tickets-alisa.com" OR destinationhostname CONTAINS "aurora-fm.com" OR destinationhostname CONTAINS "ballet-shchelkunchik.com" OR destinationhostname CONTAINS "cds-tickets.ru" OR destinationhostname CONTAINS "europaleague-tickets.ru" OR destinationhostname CONTAINS "events-fi.com" OR destinationhostname CONTAINS "fcrotor-kassa.ru" OR destinationhostname CONTAINS "figur-skating.ru" OR destinationhostname CONTAINS "hc-cska-msk.ru" OR destinationhostname CONTAINS "hcdinamoby.com" OR destinationhostname CONTAINS "krokus-tickets.ru" OR destinationhostname CONTAINS "kskexpress-tickets.ru" OR destinationhostname CONTAINS "lionking-ticket.com" OR destinationhostname CONTAINS "montechristo.ru" OR destinationhostname CONTAINS "mtftheatre.com" OR destinationhostname CONTAINS "rammstein.com.ru" OR destinationhostname CONTAINS "romeo-and-julietta.ru" OR destinationhostname CONTAINS "show-kassa.com" OR destinationhostname CONTAINS "teatr-chekhova.ru" OR destinationhostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tickets-event.com" OR sourcentdomain CONTAINS "tickets-madonna.com" OR sourcentdomain CONTAINS "zemfira.band" OR sourcentdomain CONTAINS "afisha-alextheatre.com" OR sourcentdomain CONTAINS "b2-tour.com" OR sourcentdomain CONTAINS "afisha-alisa.com" OR sourcentdomain CONTAINS "afishadtheatre.com" OR sourcentdomain CONTAINS "afishamikhtheatre.com" OR sourcentdomain CONTAINS "afisha-roof.ru" OR sourcentdomain CONTAINS "childshow.ru" OR sourcentdomain CONTAINS "cirkus-nikulina.ru" OR sourcentdomain CONTAINS "etheatreballet.com" OR sourcentdomain CONTAINS "exchange-tickets.com" OR sourcentdomain CONTAINS "fcdynamo-kassa.com" OR sourcentdomain CONTAINS "footballeurochamp.com" OR sourcentdomain CONTAINS "goldenring-kassa.ru" OR sourcentdomain CONTAINS "hc-avtomobilist.com" OR sourcentdomain CONTAINS "lastochkaclub.com" OR sourcentdomain CONTAINS "metallica-ticket.com" OR sourcentdomain CONTAINS "newyearcircus.ru" OR sourcentdomain CONTAINS "serozha-mxt.ru" OR sourcentdomain CONTAINS "spartak-footballclub.com" OR sourcentdomain CONTAINS "ticketska.ru" OR sourcentdomain CONTAINS "tickets-piratestation.ru" OR sourcentdomain CONTAINS "yubi-afisha.ru" OR sourcentdomain CONTAINS "circus-am.com" OR sourcentdomain CONTAINS "hc-lokomotiv.com" OR sourcentdomain CONTAINS "novosib-expo.ru" OR sourcentdomain CONTAINS "novosibirsk-arena.com" OR sourcentdomain CONTAINS "ticketcircus.spb.ru" OR sourcentdomain CONTAINS "tickets-alisa.com" OR sourcentdomain CONTAINS "aurora-fm.com" OR sourcentdomain CONTAINS "ballet-shchelkunchik.com" OR sourcentdomain CONTAINS "cds-tickets.ru" OR sourcentdomain CONTAINS "europaleague-tickets.ru" OR sourcentdomain CONTAINS "events-fi.com" OR sourcentdomain CONTAINS "fcrotor-kassa.ru" OR sourcentdomain CONTAINS "figur-skating.ru" OR sourcentdomain CONTAINS "hc-cska-msk.ru" OR sourcentdomain CONTAINS "hcdinamoby.com" OR sourcentdomain CONTAINS "krokus-tickets.ru" OR sourcentdomain CONTAINS "kskexpress-tickets.ru" OR sourcentdomain CONTAINS "lionking-ticket.com" OR sourcentdomain CONTAINS "montechristo.ru" OR sourcentdomain CONTAINS "mtftheatre.com" OR sourcentdomain CONTAINS "rammstein.com.ru" OR sourcentdomain CONTAINS "romeo-and-julietta.ru" OR sourcentdomain CONTAINS "show-kassa.com" OR sourcentdomain CONTAINS "teatr-chekhova.ru" OR sourcentdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tickets-event.com" OR sourcehostname CONTAINS "tickets-madonna.com" OR sourcehostname CONTAINS "zemfira.band" OR sourcehostname CONTAINS "afisha-alextheatre.com" OR sourcehostname CONTAINS "b2-tour.com" OR sourcehostname CONTAINS "afisha-alisa.com" OR sourcehostname CONTAINS "afishadtheatre.com" OR sourcehostname CONTAINS "afishamikhtheatre.com" OR sourcehostname CONTAINS "afisha-roof.ru" OR sourcehostname CONTAINS "childshow.ru" OR sourcehostname CONTAINS "cirkus-nikulina.ru" OR sourcehostname CONTAINS "etheatreballet.com" OR sourcehostname CONTAINS "exchange-tickets.com" OR sourcehostname CONTAINS "fcdynamo-kassa.com" OR sourcehostname CONTAINS "footballeurochamp.com" OR sourcehostname CONTAINS "goldenring-kassa.ru" OR sourcehostname CONTAINS "hc-avtomobilist.com" OR sourcehostname CONTAINS "lastochkaclub.com" OR sourcehostname CONTAINS "metallica-ticket.com" OR sourcehostname CONTAINS "newyearcircus.ru" OR sourcehostname CONTAINS "serozha-mxt.ru" OR sourcehostname CONTAINS "spartak-footballclub.com" OR sourcehostname CONTAINS "ticketska.ru" OR sourcehostname CONTAINS "tickets-piratestation.ru" OR sourcehostname CONTAINS "yubi-afisha.ru" OR sourcehostname CONTAINS "circus-am.com" OR sourcehostname CONTAINS "hc-lokomotiv.com" OR sourcehostname CONTAINS "novosib-expo.ru" OR sourcehostname CONTAINS "novosibirsk-arena.com" OR sourcehostname CONTAINS "ticketcircus.spb.ru" OR sourcehostname CONTAINS "tickets-alisa.com" OR sourcehostname CONTAINS "aurora-fm.com" OR sourcehostname CONTAINS "ballet-shchelkunchik.com" OR sourcehostname CONTAINS "cds-tickets.ru" OR sourcehostname CONTAINS "europaleague-tickets.ru" OR sourcehostname CONTAINS "events-fi.com" OR sourcehostname CONTAINS "fcrotor-kassa.ru" OR sourcehostname CONTAINS "figur-skating.ru" OR sourcehostname CONTAINS "hc-cska-msk.ru" OR sourcehostname CONTAINS "hcdinamoby.com" OR sourcehostname CONTAINS "krokus-tickets.ru" OR sourcehostname CONTAINS "kskexpress-tickets.ru" OR sourcehostname CONTAINS "lionking-ticket.com" OR sourcehostname CONTAINS "montechristo.ru" OR sourcehostname CONTAINS "mtftheatre.com" OR sourcehostname CONTAINS "rammstein.com.ru" OR sourcehostname CONTAINS "romeo-and-julietta.ru" OR sourcehostname CONTAINS "show-kassa.com" OR sourcehostname CONTAINS "teatr-chekhova.ru" OR sourcehostname CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tickets-event.com" OR destinationntdomain CONTAINS "tickets-madonna.com" OR destinationntdomain CONTAINS "zemfira.band" OR destinationntdomain CONTAINS "afisha-alextheatre.com" OR destinationntdomain CONTAINS "b2-tour.com" OR destinationntdomain CONTAINS "afisha-alisa.com" OR destinationntdomain CONTAINS "afishadtheatre.com" OR destinationntdomain CONTAINS "afishamikhtheatre.com" OR destinationntdomain CONTAINS "afisha-roof.ru" OR destinationntdomain CONTAINS "childshow.ru" OR destinationntdomain CONTAINS "cirkus-nikulina.ru" OR destinationntdomain CONTAINS "etheatreballet.com" OR destinationntdomain CONTAINS "exchange-tickets.com" OR destinationntdomain CONTAINS "fcdynamo-kassa.com" OR destinationntdomain CONTAINS "footballeurochamp.com" OR destinationntdomain CONTAINS "goldenring-kassa.ru" OR destinationntdomain CONTAINS "hc-avtomobilist.com" OR destinationntdomain CONTAINS "lastochkaclub.com" OR destinationntdomain CONTAINS "metallica-ticket.com" OR destinationntdomain CONTAINS "newyearcircus.ru" OR destinationntdomain CONTAINS "serozha-mxt.ru" OR destinationntdomain CONTAINS "spartak-footballclub.com" OR destinationntdomain CONTAINS "ticketska.ru" OR destinationntdomain CONTAINS "tickets-piratestation.ru" OR destinationntdomain CONTAINS "yubi-afisha.ru" OR destinationntdomain CONTAINS "circus-am.com" OR destinationntdomain CONTAINS "hc-lokomotiv.com" OR destinationntdomain CONTAINS "novosib-expo.ru" OR destinationntdomain CONTAINS "novosibirsk-arena.com" OR destinationntdomain CONTAINS "ticketcircus.spb.ru" OR destinationntdomain CONTAINS "tickets-alisa.com" OR destinationntdomain CONTAINS "aurora-fm.com" OR destinationntdomain CONTAINS "ballet-shchelkunchik.com" OR destinationntdomain CONTAINS "cds-tickets.ru" OR destinationntdomain CONTAINS "europaleague-tickets.ru" OR destinationntdomain CONTAINS "events-fi.com" OR destinationntdomain CONTAINS "fcrotor-kassa.ru" OR destinationntdomain CONTAINS "figur-skating.ru" OR destinationntdomain CONTAINS "hc-cska-msk.ru" OR destinationntdomain CONTAINS "hcdinamoby.com" OR destinationntdomain CONTAINS "krokus-tickets.ru" OR destinationntdomain CONTAINS "kskexpress-tickets.ru" OR destinationntdomain CONTAINS "lionking-ticket.com" OR destinationntdomain CONTAINS "montechristo.ru" OR destinationntdomain CONTAINS "mtftheatre.com" OR destinationntdomain CONTAINS "rammstein.com.ru" OR destinationntdomain CONTAINS "romeo-and-julietta.ru" OR destinationntdomain CONTAINS "show-kassa.com" OR destinationntdomain CONTAINS "teatr-chekhova.ru" OR destinationntdomain CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "tickets-event.com" OR requesturl CONTAINS "tickets-madonna.com" OR requesturl CONTAINS "zemfira.band" OR requesturl CONTAINS "afisha-alextheatre.com" OR requesturl CONTAINS "b2-tour.com" OR requesturl CONTAINS "afisha-alisa.com" OR requesturl CONTAINS "afishadtheatre.com" OR requesturl CONTAINS "afishamikhtheatre.com" OR requesturl CONTAINS "afisha-roof.ru" OR requesturl CONTAINS "childshow.ru" OR requesturl CONTAINS "cirkus-nikulina.ru" OR requesturl CONTAINS "etheatreballet.com" OR requesturl CONTAINS "exchange-tickets.com" OR requesturl CONTAINS "fcdynamo-kassa.com" OR requesturl CONTAINS "footballeurochamp.com" OR requesturl CONTAINS "goldenring-kassa.ru" OR requesturl CONTAINS "hc-avtomobilist.com" OR requesturl CONTAINS "lastochkaclub.com" OR requesturl CONTAINS "metallica-ticket.com" OR requesturl CONTAINS "newyearcircus.ru" OR requesturl CONTAINS "serozha-mxt.ru" OR requesturl CONTAINS "spartak-footballclub.com" OR requesturl CONTAINS "ticketska.ru" OR requesturl CONTAINS "tickets-piratestation.ru" OR requesturl CONTAINS "yubi-afisha.ru" OR requesturl CONTAINS "circus-am.com" OR requesturl CONTAINS "hc-lokomotiv.com" OR requesturl CONTAINS "novosib-expo.ru" OR requesturl CONTAINS "novosibirsk-arena.com" OR requesturl CONTAINS "ticketcircus.spb.ru" OR requesturl CONTAINS "tickets-alisa.com" OR requesturl CONTAINS "aurora-fm.com" OR requesturl CONTAINS "ballet-shchelkunchik.com" OR requesturl CONTAINS "cds-tickets.ru" OR requesturl CONTAINS "europaleague-tickets.ru" OR requesturl CONTAINS "events-fi.com" OR requesturl CONTAINS "fcrotor-kassa.ru" OR requesturl CONTAINS "figur-skating.ru" OR requesturl CONTAINS "hc-cska-msk.ru" OR requesturl CONTAINS "hcdinamoby.com" OR requesturl CONTAINS "krokus-tickets.ru" OR requesturl CONTAINS "kskexpress-tickets.ru" OR requesturl CONTAINS "lionking-ticket.com" OR requesturl CONTAINS "montechristo.ru" OR requesturl CONTAINS "mtftheatre.com" OR requesturl CONTAINS "rammstein.com.ru" OR requesturl CONTAINS "romeo-and-julietta.ru" OR requesturl CONTAINS "show-kassa.com" OR requesturl CONTAINS "teatr-chekhova.ru" OR requesturl CONTAINS "teatr-fomenki.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ticketoffice-ee.com" OR destinationhostname CONTAINS "ticketoffice-lt.com" OR destinationhostname CONTAINS "ticketoffice-lv.com" OR destinationhostname CONTAINS "ticketscomedy.ru" OR destinationhostname CONTAINS "vk-fest.com" OR destinationhostname CONTAINS "votheatre.com" OR destinationhostname CONTAINS "afishavokzal.com" OR destinationhostname CONTAINS "arenaabydhabi.com" OR destinationhostname CONTAINS "arenaetihad.com" OR destinationhostname CONTAINS "olimpic-tickets.com" OR destinationhostname CONTAINS "fcks-ticket.com" OR destinationhostname CONTAINS "afisha-gbarclub.ru" OR destinationhostname CONTAINS "copaamerica-tickets.com" OR destinationhostname CONTAINS "hamilton-ticket.com" OR destinationhostname CONTAINS "hcsibir-tickets.ru" OR destinationhostname CONTAINS "pro-fights.com" OR destinationhostname CONTAINS "1tv-cup.com" OR destinationhostname CONTAINS "arena-minsk.com" OR destinationhostname CONTAINS "chaikovskogo-kassa.com" OR destinationhostname CONTAINS "fcnn-tickets.com" OR destinationhostname CONTAINS "fhr-ticket.com" OR destinationhostname CONTAINS "hockey-spartakclub.ru" OR destinationhostname CONTAINS "igor-krutoi.ru" OR destinationhostname CONTAINS "afisha-mot.ru" OR destinationhostname CONTAINS "arena-volgograd.ru" OR destinationhostname CONTAINS "great-teatr.com" OR destinationhostname CONTAINS "krd-stadium.ru" OR destinationhostname CONTAINS "ska-ticket.ru" OR destinationhostname CONTAINS "basta-tour.com" OR destinationhostname CONTAINS "afishaolympia.com" OR destinationhostname CONTAINS "dkvtheatre.com" OR destinationhostname CONTAINS "maks-korzh.ru" OR destinationhostname CONTAINS "meladze-concerts.com" OR destinationhostname CONTAINS "mxtafisha.ru" OR destinationhostname CONTAINS "teatrramt.ru" OR destinationhostname CONTAINS "allstarsday.com" OR destinationhostname CONTAINS "volgograd-kassa.ru" OR destinationhostname CONTAINS "almatyarena.com" OR destinationhostname CONTAINS "arena-sibir.ru" OR destinationhostname CONTAINS "arenasibir-kassa.ru" OR destinationhostname CONTAINS "crokus-concert.com" OR destinationhostname CONTAINS "gofuture-games.ru" OR destinationhostname CONTAINS "afisha-alisa.ru" OR destinationhostname CONTAINS "afishalolita.com" OR destinationhostname CONTAINS "arena-kassa.ru" OR destinationhostname CONTAINS "big-circ.ru" OR destinationhostname CONTAINS "elka-kremlin.ru" OR destinationhostname CONTAINS "filipp-kirkorov.com" OR destinationhostname CONTAINS "hcsibir-tickets.com" OR destinationhostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ticketoffice-ee.com" OR sourcentdomain CONTAINS "ticketoffice-lt.com" OR sourcentdomain CONTAINS "ticketoffice-lv.com" OR sourcentdomain CONTAINS "ticketscomedy.ru" OR sourcentdomain CONTAINS "vk-fest.com" OR sourcentdomain CONTAINS "votheatre.com" OR sourcentdomain CONTAINS "afishavokzal.com" OR sourcentdomain CONTAINS "arenaabydhabi.com" OR sourcentdomain CONTAINS "arenaetihad.com" OR sourcentdomain CONTAINS "olimpic-tickets.com" OR sourcentdomain CONTAINS "fcks-ticket.com" OR sourcentdomain CONTAINS "afisha-gbarclub.ru" OR sourcentdomain CONTAINS "copaamerica-tickets.com" OR sourcentdomain CONTAINS "hamilton-ticket.com" OR sourcentdomain CONTAINS "hcsibir-tickets.ru" OR sourcentdomain CONTAINS "pro-fights.com" OR sourcentdomain CONTAINS "1tv-cup.com" OR sourcentdomain CONTAINS "arena-minsk.com" OR sourcentdomain CONTAINS "chaikovskogo-kassa.com" OR sourcentdomain CONTAINS "fcnn-tickets.com" OR sourcentdomain CONTAINS "fhr-ticket.com" OR sourcentdomain CONTAINS "hockey-spartakclub.ru" OR sourcentdomain CONTAINS "igor-krutoi.ru" OR sourcentdomain CONTAINS "afisha-mot.ru" OR sourcentdomain CONTAINS "arena-volgograd.ru" OR sourcentdomain CONTAINS "great-teatr.com" OR sourcentdomain CONTAINS "krd-stadium.ru" OR sourcentdomain CONTAINS "ska-ticket.ru" OR sourcentdomain CONTAINS "basta-tour.com" OR sourcentdomain CONTAINS "afishaolympia.com" OR sourcentdomain CONTAINS "dkvtheatre.com" OR sourcentdomain CONTAINS "maks-korzh.ru" OR sourcentdomain CONTAINS "meladze-concerts.com" OR sourcentdomain CONTAINS "mxtafisha.ru" OR sourcentdomain CONTAINS "teatrramt.ru" OR sourcentdomain CONTAINS "allstarsday.com" OR sourcentdomain CONTAINS "volgograd-kassa.ru" OR sourcentdomain CONTAINS "almatyarena.com" OR sourcentdomain CONTAINS "arena-sibir.ru" OR sourcentdomain CONTAINS "arenasibir-kassa.ru" OR sourcentdomain CONTAINS "crokus-concert.com" OR sourcentdomain CONTAINS "gofuture-games.ru" OR sourcentdomain CONTAINS "afisha-alisa.ru" OR sourcentdomain CONTAINS "afishalolita.com" OR sourcentdomain CONTAINS "arena-kassa.ru" OR sourcentdomain CONTAINS "big-circ.ru" OR sourcentdomain CONTAINS "elka-kremlin.ru" OR sourcentdomain CONTAINS "filipp-kirkorov.com" OR sourcentdomain CONTAINS "hcsibir-tickets.com" OR sourcentdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ticketoffice-ee.com" OR sourcehostname CONTAINS "ticketoffice-lt.com" OR sourcehostname CONTAINS "ticketoffice-lv.com" OR sourcehostname CONTAINS "ticketscomedy.ru" OR sourcehostname CONTAINS "vk-fest.com" OR sourcehostname CONTAINS "votheatre.com" OR sourcehostname CONTAINS "afishavokzal.com" OR sourcehostname CONTAINS "arenaabydhabi.com" OR sourcehostname CONTAINS "arenaetihad.com" OR sourcehostname CONTAINS "olimpic-tickets.com" OR sourcehostname CONTAINS "fcks-ticket.com" OR sourcehostname CONTAINS "afisha-gbarclub.ru" OR sourcehostname CONTAINS "copaamerica-tickets.com" OR sourcehostname CONTAINS "hamilton-ticket.com" OR sourcehostname CONTAINS "hcsibir-tickets.ru" OR sourcehostname CONTAINS "pro-fights.com" OR sourcehostname CONTAINS "1tv-cup.com" OR sourcehostname CONTAINS "arena-minsk.com" OR sourcehostname CONTAINS "chaikovskogo-kassa.com" OR sourcehostname CONTAINS "fcnn-tickets.com" OR sourcehostname CONTAINS "fhr-ticket.com" OR sourcehostname CONTAINS "hockey-spartakclub.ru" OR sourcehostname CONTAINS "igor-krutoi.ru" OR sourcehostname CONTAINS "afisha-mot.ru" OR sourcehostname CONTAINS "arena-volgograd.ru" OR sourcehostname CONTAINS "great-teatr.com" OR sourcehostname CONTAINS "krd-stadium.ru" OR sourcehostname CONTAINS "ska-ticket.ru" OR sourcehostname CONTAINS "basta-tour.com" OR sourcehostname CONTAINS "afishaolympia.com" OR sourcehostname CONTAINS "dkvtheatre.com" OR sourcehostname CONTAINS "maks-korzh.ru" OR sourcehostname CONTAINS "meladze-concerts.com" OR sourcehostname CONTAINS "mxtafisha.ru" OR sourcehostname CONTAINS "teatrramt.ru" OR sourcehostname CONTAINS "allstarsday.com" OR sourcehostname CONTAINS "volgograd-kassa.ru" OR sourcehostname CONTAINS "almatyarena.com" OR sourcehostname CONTAINS "arena-sibir.ru" OR sourcehostname CONTAINS "arenasibir-kassa.ru" OR sourcehostname CONTAINS "crokus-concert.com" OR sourcehostname CONTAINS "gofuture-games.ru" OR sourcehostname CONTAINS "afisha-alisa.ru" OR sourcehostname CONTAINS "afishalolita.com" OR sourcehostname CONTAINS "arena-kassa.ru" OR sourcehostname CONTAINS "big-circ.ru" OR sourcehostname CONTAINS "elka-kremlin.ru" OR sourcehostname CONTAINS "filipp-kirkorov.com" OR sourcehostname CONTAINS "hcsibir-tickets.com" OR sourcehostname CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ticketoffice-ee.com" OR destinationntdomain CONTAINS "ticketoffice-lt.com" OR destinationntdomain CONTAINS "ticketoffice-lv.com" OR destinationntdomain CONTAINS "ticketscomedy.ru" OR destinationntdomain CONTAINS "vk-fest.com" OR destinationntdomain CONTAINS "votheatre.com" OR destinationntdomain CONTAINS "afishavokzal.com" OR destinationntdomain CONTAINS "arenaabydhabi.com" OR destinationntdomain CONTAINS "arenaetihad.com" OR destinationntdomain CONTAINS "olimpic-tickets.com" OR destinationntdomain CONTAINS "fcks-ticket.com" OR destinationntdomain CONTAINS "afisha-gbarclub.ru" OR destinationntdomain CONTAINS "copaamerica-tickets.com" OR destinationntdomain CONTAINS "hamilton-ticket.com" OR destinationntdomain CONTAINS "hcsibir-tickets.ru" OR destinationntdomain CONTAINS "pro-fights.com" OR destinationntdomain CONTAINS "1tv-cup.com" OR destinationntdomain CONTAINS "arena-minsk.com" OR destinationntdomain CONTAINS "chaikovskogo-kassa.com" OR destinationntdomain CONTAINS "fcnn-tickets.com" OR destinationntdomain CONTAINS "fhr-ticket.com" OR destinationntdomain CONTAINS "hockey-spartakclub.ru" OR destinationntdomain CONTAINS "igor-krutoi.ru" OR destinationntdomain CONTAINS "afisha-mot.ru" OR destinationntdomain CONTAINS "arena-volgograd.ru" OR destinationntdomain CONTAINS "great-teatr.com" OR destinationntdomain CONTAINS "krd-stadium.ru" OR destinationntdomain CONTAINS "ska-ticket.ru" OR destinationntdomain CONTAINS "basta-tour.com" OR destinationntdomain CONTAINS "afishaolympia.com" OR destinationntdomain CONTAINS "dkvtheatre.com" OR destinationntdomain CONTAINS "maks-korzh.ru" OR destinationntdomain CONTAINS "meladze-concerts.com" OR destinationntdomain CONTAINS "mxtafisha.ru" OR destinationntdomain CONTAINS "teatrramt.ru" OR destinationntdomain CONTAINS "allstarsday.com" OR destinationntdomain CONTAINS "volgograd-kassa.ru" OR destinationntdomain CONTAINS "almatyarena.com" OR destinationntdomain CONTAINS "arena-sibir.ru" OR destinationntdomain CONTAINS "arenasibir-kassa.ru" OR destinationntdomain CONTAINS "crokus-concert.com" OR destinationntdomain CONTAINS "gofuture-games.ru" OR destinationntdomain CONTAINS "afisha-alisa.ru" OR destinationntdomain CONTAINS "afishalolita.com" OR destinationntdomain CONTAINS "arena-kassa.ru" OR destinationntdomain CONTAINS "big-circ.ru" OR destinationntdomain CONTAINS "elka-kremlin.ru" OR destinationntdomain CONTAINS "filipp-kirkorov.com" OR destinationntdomain CONTAINS "hcsibir-tickets.com" OR destinationntdomain CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "ticketoffice-ee.com" OR requesturl CONTAINS "ticketoffice-lt.com" OR requesturl CONTAINS "ticketoffice-lv.com" OR requesturl CONTAINS "ticketscomedy.ru" OR requesturl CONTAINS "vk-fest.com" OR requesturl CONTAINS "votheatre.com" OR requesturl CONTAINS "afishavokzal.com" OR requesturl CONTAINS "arenaabydhabi.com" OR requesturl CONTAINS "arenaetihad.com" OR requesturl CONTAINS "olimpic-tickets.com" OR requesturl CONTAINS "fcks-ticket.com" OR requesturl CONTAINS "afisha-gbarclub.ru" OR requesturl CONTAINS "copaamerica-tickets.com" OR requesturl CONTAINS "hamilton-ticket.com" OR requesturl CONTAINS "hcsibir-tickets.ru" OR requesturl CONTAINS "pro-fights.com" OR requesturl CONTAINS "1tv-cup.com" OR requesturl CONTAINS "arena-minsk.com" OR requesturl CONTAINS "chaikovskogo-kassa.com" OR requesturl CONTAINS "fcnn-tickets.com" OR requesturl CONTAINS "fhr-ticket.com" OR requesturl CONTAINS "hockey-spartakclub.ru" OR requesturl CONTAINS "igor-krutoi.ru" OR requesturl CONTAINS "afisha-mot.ru" OR requesturl CONTAINS "arena-volgograd.ru" OR requesturl CONTAINS "great-teatr.com" OR requesturl CONTAINS "krd-stadium.ru" OR requesturl CONTAINS "ska-ticket.ru" OR requesturl CONTAINS "basta-tour.com" OR requesturl CONTAINS "afishaolympia.com" OR requesturl CONTAINS "dkvtheatre.com" OR requesturl CONTAINS "maks-korzh.ru" OR requesturl CONTAINS "meladze-concerts.com" OR requesturl CONTAINS "mxtafisha.ru" OR requesturl CONTAINS "teatrramt.ru" OR requesturl CONTAINS "allstarsday.com" OR requesturl CONTAINS "volgograd-kassa.ru" OR requesturl CONTAINS "almatyarena.com" OR requesturl CONTAINS "arena-sibir.ru" OR requesturl CONTAINS "arenasibir-kassa.ru" OR requesturl CONTAINS "crokus-concert.com" OR requesturl CONTAINS "gofuture-games.ru" OR requesturl CONTAINS "afisha-alisa.ru" OR requesturl CONTAINS "afishalolita.com" OR requesturl CONTAINS "arena-kassa.ru" OR requesturl CONTAINS "big-circ.ru" OR requesturl CONTAINS "elka-kremlin.ru" OR requesturl CONTAINS "filipp-kirkorov.com" OR requesturl CONTAINS "hcsibir-tickets.com" OR requesturl CONTAINS "izvestiyahall.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "kingdomarena-sa.com" OR destinationhostname CONTAINS "opereta-afisha.ru" OR destinationhostname CONTAINS "rnd-stadium.ru" OR destinationhostname CONTAINS "rsahall-afisha.ru" OR destinationhostname CONTAINS "sportafisha.com" OR destinationhostname CONTAINS "taganka-teatr.ru" OR destinationhostname CONTAINS "ticket-concert.com" OR destinationhostname CONTAINS "tickets-louvre.com" OR destinationhostname CONTAINS "vk-stadium.com" OR destinationhostname CONTAINS "afisha-kremlya.com" OR destinationhostname CONTAINS "ticketfootball.ru" OR destinationhostname CONTAINS "afisha-cosclub.ru" OR destinationhostname CONTAINS "amadeu.ru" OR destinationhostname CONTAINS "cirk-nikulin.ru" OR destinationhostname CONTAINS "cska-kassy.ru" OR destinationhostname CONTAINS "eseninwomen.ru" OR destinationhostname CONTAINS "es-tickets.ru" OR destinationhostname CONTAINS "green-day.ru" OR destinationhostname CONTAINS "kazanarena-tickets.ru" OR destinationhostname CONTAINS "lada-kassa.com" OR destinationhostname CONTAINS "pbilet.ru" OR destinationhostname CONTAINS "tickets-avto.ru" OR destinationhostname CONTAINS "almaty-ayenderi.com" OR destinationhostname CONTAINS "cska-hockeyarena.com" OR destinationhostname CONTAINS "dk-zyeva.com" OR destinationhostname CONTAINS "kzmconcert.com" OR destinationhostname CONTAINS "tickets-fest.ru" OR destinationhostname CONTAINS "1tvcup.com" OR destinationhostname CONTAINS "icepalace-bolshoi.ru" OR destinationhostname CONTAINS "new-opera.ru" OR destinationhostname CONTAINS "afishagagarina.com" OR destinationhostname CONTAINS "afisha-kzm.com" OR destinationhostname CONTAINS "dimash-ticket.ru" OR destinationhostname CONTAINS "rostov-teatr.ru" OR destinationhostname CONTAINS "russiaserbiafootball.com" OR destinationhostname CONTAINS "arenasibir-nsk.ru" OR destinationhostname CONTAINS "bt-kassa.com" OR destinationhostname CONTAINS "gdrv-arena.ru" OR destinationhostname CONTAINS "mihtheatre.com" OR destinationhostname CONTAINS "sibir-arena.com" OR destinationhostname CONTAINS "ticketoffice.ae" OR destinationhostname CONTAINS "ticketscircus.spb.ru" OR destinationhostname CONTAINS "crave-tickets.com" OR destinationhostname CONTAINS "tickets-am.com" OR destinationhostname CONTAINS "arena-spb.com" OR destinationhostname CONTAINS "bt-tickets.com" OR destinationhostname CONTAINS "hc-kazan.ru" OR destinationhostname CONTAINS "lentheatre.com" OR destinationhostname CONTAINS "afishacircus.com" OR destinationhostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "kingdomarena-sa.com" OR sourcentdomain CONTAINS "opereta-afisha.ru" OR sourcentdomain CONTAINS "rnd-stadium.ru" OR sourcentdomain CONTAINS "rsahall-afisha.ru" OR sourcentdomain CONTAINS "sportafisha.com" OR sourcentdomain CONTAINS "taganka-teatr.ru" OR sourcentdomain CONTAINS "ticket-concert.com" OR sourcentdomain CONTAINS "tickets-louvre.com" OR sourcentdomain CONTAINS "vk-stadium.com" OR sourcentdomain CONTAINS "afisha-kremlya.com" OR sourcentdomain CONTAINS "ticketfootball.ru" OR sourcentdomain CONTAINS "afisha-cosclub.ru" OR sourcentdomain CONTAINS "amadeu.ru" OR sourcentdomain CONTAINS "cirk-nikulin.ru" OR sourcentdomain CONTAINS "cska-kassy.ru" OR sourcentdomain CONTAINS "eseninwomen.ru" OR sourcentdomain CONTAINS "es-tickets.ru" OR sourcentdomain CONTAINS "green-day.ru" OR sourcentdomain CONTAINS "kazanarena-tickets.ru" OR sourcentdomain CONTAINS "lada-kassa.com" OR sourcentdomain CONTAINS "pbilet.ru" OR sourcentdomain CONTAINS "tickets-avto.ru" OR sourcentdomain CONTAINS "almaty-ayenderi.com" OR sourcentdomain CONTAINS "cska-hockeyarena.com" OR sourcentdomain CONTAINS "dk-zyeva.com" OR sourcentdomain CONTAINS "kzmconcert.com" OR sourcentdomain CONTAINS "tickets-fest.ru" OR sourcentdomain CONTAINS "1tvcup.com" OR sourcentdomain CONTAINS "icepalace-bolshoi.ru" OR sourcentdomain CONTAINS "new-opera.ru" OR sourcentdomain CONTAINS "afishagagarina.com" OR sourcentdomain CONTAINS "afisha-kzm.com" OR sourcentdomain CONTAINS "dimash-ticket.ru" OR sourcentdomain CONTAINS "rostov-teatr.ru" OR sourcentdomain CONTAINS "russiaserbiafootball.com" OR sourcentdomain CONTAINS "arenasibir-nsk.ru" OR sourcentdomain CONTAINS "bt-kassa.com" OR sourcentdomain CONTAINS "gdrv-arena.ru" OR sourcentdomain CONTAINS "mihtheatre.com" OR sourcentdomain CONTAINS "sibir-arena.com" OR sourcentdomain CONTAINS "ticketoffice.ae" OR sourcentdomain CONTAINS "ticketscircus.spb.ru" OR sourcentdomain CONTAINS "crave-tickets.com" OR sourcentdomain CONTAINS "tickets-am.com" OR sourcentdomain CONTAINS "arena-spb.com" OR sourcentdomain CONTAINS "bt-tickets.com" OR sourcentdomain CONTAINS "hc-kazan.ru" OR sourcentdomain CONTAINS "lentheatre.com" OR sourcentdomain CONTAINS "afishacircus.com" OR sourcentdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "kingdomarena-sa.com" OR sourcehostname CONTAINS "opereta-afisha.ru" OR sourcehostname CONTAINS "rnd-stadium.ru" OR sourcehostname CONTAINS "rsahall-afisha.ru" OR sourcehostname CONTAINS "sportafisha.com" OR sourcehostname CONTAINS "taganka-teatr.ru" OR sourcehostname CONTAINS "ticket-concert.com" OR sourcehostname CONTAINS "tickets-louvre.com" OR sourcehostname CONTAINS "vk-stadium.com" OR sourcehostname CONTAINS "afisha-kremlya.com" OR sourcehostname CONTAINS "ticketfootball.ru" OR sourcehostname CONTAINS "afisha-cosclub.ru" OR sourcehostname CONTAINS "amadeu.ru" OR sourcehostname CONTAINS "cirk-nikulin.ru" OR sourcehostname CONTAINS "cska-kassy.ru" OR sourcehostname CONTAINS "eseninwomen.ru" OR sourcehostname CONTAINS "es-tickets.ru" OR sourcehostname CONTAINS "green-day.ru" OR sourcehostname CONTAINS "kazanarena-tickets.ru" OR sourcehostname CONTAINS "lada-kassa.com" OR sourcehostname CONTAINS "pbilet.ru" OR sourcehostname CONTAINS "tickets-avto.ru" OR sourcehostname CONTAINS "almaty-ayenderi.com" OR sourcehostname CONTAINS "cska-hockeyarena.com" OR sourcehostname CONTAINS "dk-zyeva.com" OR sourcehostname CONTAINS "kzmconcert.com" OR sourcehostname CONTAINS "tickets-fest.ru" OR sourcehostname CONTAINS "1tvcup.com" OR sourcehostname CONTAINS "icepalace-bolshoi.ru" OR sourcehostname CONTAINS "new-opera.ru" OR sourcehostname CONTAINS "afishagagarina.com" OR sourcehostname CONTAINS "afisha-kzm.com" OR sourcehostname CONTAINS "dimash-ticket.ru" OR sourcehostname CONTAINS "rostov-teatr.ru" OR sourcehostname CONTAINS "russiaserbiafootball.com" OR sourcehostname CONTAINS "arenasibir-nsk.ru" OR sourcehostname CONTAINS "bt-kassa.com" OR sourcehostname CONTAINS "gdrv-arena.ru" OR sourcehostname CONTAINS "mihtheatre.com" OR sourcehostname CONTAINS "sibir-arena.com" OR sourcehostname CONTAINS "ticketoffice.ae" OR sourcehostname CONTAINS "ticketscircus.spb.ru" OR sourcehostname CONTAINS "crave-tickets.com" OR sourcehostname CONTAINS "tickets-am.com" OR sourcehostname CONTAINS "arena-spb.com" OR sourcehostname CONTAINS "bt-tickets.com" OR sourcehostname CONTAINS "hc-kazan.ru" OR sourcehostname CONTAINS "lentheatre.com" OR sourcehostname CONTAINS "afishacircus.com" OR sourcehostname CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "kingdomarena-sa.com" OR destinationntdomain CONTAINS "opereta-afisha.ru" OR destinationntdomain CONTAINS "rnd-stadium.ru" OR destinationntdomain CONTAINS "rsahall-afisha.ru" OR destinationntdomain CONTAINS "sportafisha.com" OR destinationntdomain CONTAINS "taganka-teatr.ru" OR destinationntdomain CONTAINS "ticket-concert.com" OR destinationntdomain CONTAINS "tickets-louvre.com" OR destinationntdomain CONTAINS "vk-stadium.com" OR destinationntdomain CONTAINS "afisha-kremlya.com" OR destinationntdomain CONTAINS "ticketfootball.ru" OR destinationntdomain CONTAINS "afisha-cosclub.ru" OR destinationntdomain CONTAINS "amadeu.ru" OR destinationntdomain CONTAINS "cirk-nikulin.ru" OR destinationntdomain CONTAINS "cska-kassy.ru" OR destinationntdomain CONTAINS "eseninwomen.ru" OR destinationntdomain CONTAINS "es-tickets.ru" OR destinationntdomain CONTAINS "green-day.ru" OR destinationntdomain CONTAINS "kazanarena-tickets.ru" OR destinationntdomain CONTAINS "lada-kassa.com" OR destinationntdomain CONTAINS "pbilet.ru" OR destinationntdomain CONTAINS "tickets-avto.ru" OR destinationntdomain CONTAINS "almaty-ayenderi.com" OR destinationntdomain CONTAINS "cska-hockeyarena.com" OR destinationntdomain CONTAINS "dk-zyeva.com" OR destinationntdomain CONTAINS "kzmconcert.com" OR destinationntdomain CONTAINS "tickets-fest.ru" OR destinationntdomain CONTAINS "1tvcup.com" OR destinationntdomain CONTAINS "icepalace-bolshoi.ru" OR destinationntdomain CONTAINS "new-opera.ru" OR destinationntdomain CONTAINS "afishagagarina.com" OR destinationntdomain CONTAINS "afisha-kzm.com" OR destinationntdomain CONTAINS "dimash-ticket.ru" OR destinationntdomain CONTAINS "rostov-teatr.ru" OR destinationntdomain CONTAINS "russiaserbiafootball.com" OR destinationntdomain CONTAINS "arenasibir-nsk.ru" OR destinationntdomain CONTAINS "bt-kassa.com" OR destinationntdomain CONTAINS "gdrv-arena.ru" OR destinationntdomain CONTAINS "mihtheatre.com" OR destinationntdomain CONTAINS "sibir-arena.com" OR destinationntdomain CONTAINS "ticketoffice.ae" OR destinationntdomain CONTAINS "ticketscircus.spb.ru" OR destinationntdomain CONTAINS "crave-tickets.com" OR destinationntdomain CONTAINS "tickets-am.com" OR destinationntdomain CONTAINS "arena-spb.com" OR destinationntdomain CONTAINS "bt-tickets.com" OR destinationntdomain CONTAINS "hc-kazan.ru" OR destinationntdomain CONTAINS "lentheatre.com" OR destinationntdomain CONTAINS "afishacircus.com" OR destinationntdomain CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "kingdomarena-sa.com" OR requesturl CONTAINS "opereta-afisha.ru" OR requesturl CONTAINS "rnd-stadium.ru" OR requesturl CONTAINS "rsahall-afisha.ru" OR requesturl CONTAINS "sportafisha.com" OR requesturl CONTAINS "taganka-teatr.ru" OR requesturl CONTAINS "ticket-concert.com" OR requesturl CONTAINS "tickets-louvre.com" OR requesturl CONTAINS "vk-stadium.com" OR requesturl CONTAINS "afisha-kremlya.com" OR requesturl CONTAINS "ticketfootball.ru" OR requesturl CONTAINS "afisha-cosclub.ru" OR requesturl CONTAINS "amadeu.ru" OR requesturl CONTAINS "cirk-nikulin.ru" OR requesturl CONTAINS "cska-kassy.ru" OR requesturl CONTAINS "eseninwomen.ru" OR requesturl CONTAINS "es-tickets.ru" OR requesturl CONTAINS "green-day.ru" OR requesturl CONTAINS "kazanarena-tickets.ru" OR requesturl CONTAINS "lada-kassa.com" OR requesturl CONTAINS "pbilet.ru" OR requesturl CONTAINS "tickets-avto.ru" OR requesturl CONTAINS "almaty-ayenderi.com" OR requesturl CONTAINS "cska-hockeyarena.com" OR requesturl CONTAINS "dk-zyeva.com" OR requesturl CONTAINS "kzmconcert.com" OR requesturl CONTAINS "tickets-fest.ru" OR requesturl CONTAINS "1tvcup.com" OR requesturl CONTAINS "icepalace-bolshoi.ru" OR requesturl CONTAINS "new-opera.ru" OR requesturl CONTAINS "afishagagarina.com" OR requesturl CONTAINS "afisha-kzm.com" OR requesturl CONTAINS "dimash-ticket.ru" OR requesturl CONTAINS "rostov-teatr.ru" OR requesturl CONTAINS "russiaserbiafootball.com" OR requesturl CONTAINS "arenasibir-nsk.ru" OR requesturl CONTAINS "bt-kassa.com" OR requesturl CONTAINS "gdrv-arena.ru" OR requesturl CONTAINS "mihtheatre.com" OR requesturl CONTAINS "sibir-arena.com" OR requesturl CONTAINS "ticketoffice.ae" OR requesturl CONTAINS "ticketscircus.spb.ru" OR requesturl CONTAINS "crave-tickets.com" OR requesturl CONTAINS "tickets-am.com" OR requesturl CONTAINS "arena-spb.com" OR requesturl CONTAINS "bt-tickets.com" OR requesturl CONTAINS "hc-kazan.ru" OR requesturl CONTAINS "lentheatre.com" OR requesturl CONTAINS "afishacircus.com" OR requesturl CONTAINS "afisha-circus.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "gofuture-games.com" OR destinationhostname CONTAINS "greenteatr.ru" OR destinationhostname CONTAINS "league-nations.com" OR destinationhostname CONTAINS "acdc-tickets.com" OR destinationhostname CONTAINS "afishatheatreballet.com" OR destinationhostname CONTAINS "alessafina-tour.com" OR destinationhostname CONTAINS "ticket-paris24.com" OR destinationhostname CONTAINS "circbilet.ru" OR destinationhostname CONTAINS "cska-ticketsstore.com" OR destinationhostname CONTAINS "kaz-theatre.com" OR destinationhostname CONTAINS "nikulin-circ.ru" OR destinationhostname CONTAINS "concert-knyazz.ru" OR destinationhostname CONTAINS "danceopentheatre.com" OR destinationhostname CONTAINS "tickets-hcska.com" OR destinationhostname CONTAINS "arena-kassa.com" OR destinationhostname CONTAINS "ekb-arena-kassa.ru" OR destinationhostname CONTAINS "ekb-stadium.ru" OR destinationhostname CONTAINS "euro2024-ticketing.com" OR destinationhostname CONTAINS "kosmos-kkt.com" OR destinationhostname CONTAINS "krasnodar-arena-kassa.ru" OR destinationhostname CONTAINS "lukoil-arena-kassa.ru" OR destinationhostname CONTAINS "rostov-arena-kassa.ru" OR destinationhostname CONTAINS "samara-arena-kassa.ru" OR destinationhostname CONTAINS "16-tons.ru" OR destinationhostname CONTAINS "afisharoof.com" OR destinationhostname CONTAINS "danceopentheater.com" OR destinationhostname CONTAINS "embargo-tickets.com" OR destinationhostname CONTAINS "events-de.com" OR destinationhostname CONTAINS "games-future.com" OR destinationhostname CONTAINS "m1-arena.com" OR destinationhostname CONTAINS "nov-at.com" OR destinationhostname CONTAINS "polina-gagarina.com" OR destinationhostname CONTAINS "teatr-ermolovoy.ru" OR destinationhostname CONTAINS "teatrestrada.com" OR destinationhostname CONTAINS "volya-tickets.ru" OR destinationhostname CONTAINS "guf-tickets.ru" OR destinationhostname CONTAINS "leningrad-tickets.ru" OR destinationhostname CONTAINS "ticketparis24.com" OR destinationhostname CONTAINS "bricskz2024.com" OR destinationhostname CONTAINS "msport-arena.ru" OR destinationhostname CONTAINS "musicatheatre.com" OR destinationhostname CONTAINS "philkassa-spb.com" OR destinationhostname CONTAINS "torpedo-moscow.com" OR destinationhostname CONTAINS "ufc308.com" OR destinationhostname CONTAINS "saburov-nurlan.com" OR destinationhostname CONTAINS "ural-pelmeny.ru" OR destinationhostname CONTAINS "bilet-v-kreml.com" OR destinationhostname CONTAINS "dinamo-arena.com" OR destinationhostname CONTAINS "icearena-nn.com" OR destinationhostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "gofuture-games.com" OR sourcentdomain CONTAINS "greenteatr.ru" OR sourcentdomain CONTAINS "league-nations.com" OR sourcentdomain CONTAINS "acdc-tickets.com" OR sourcentdomain CONTAINS "afishatheatreballet.com" OR sourcentdomain CONTAINS "alessafina-tour.com" OR sourcentdomain CONTAINS "ticket-paris24.com" OR sourcentdomain CONTAINS "circbilet.ru" OR sourcentdomain CONTAINS "cska-ticketsstore.com" OR sourcentdomain CONTAINS "kaz-theatre.com" OR sourcentdomain CONTAINS "nikulin-circ.ru" OR sourcentdomain CONTAINS "concert-knyazz.ru" OR sourcentdomain CONTAINS "danceopentheatre.com" OR sourcentdomain CONTAINS "tickets-hcska.com" OR sourcentdomain CONTAINS "arena-kassa.com" OR sourcentdomain CONTAINS "ekb-arena-kassa.ru" OR sourcentdomain CONTAINS "ekb-stadium.ru" OR sourcentdomain CONTAINS "euro2024-ticketing.com" OR sourcentdomain CONTAINS "kosmos-kkt.com" OR sourcentdomain CONTAINS "krasnodar-arena-kassa.ru" OR sourcentdomain CONTAINS "lukoil-arena-kassa.ru" OR sourcentdomain CONTAINS "rostov-arena-kassa.ru" OR sourcentdomain CONTAINS "samara-arena-kassa.ru" OR sourcentdomain CONTAINS "16-tons.ru" OR sourcentdomain CONTAINS "afisharoof.com" OR sourcentdomain CONTAINS "danceopentheater.com" OR sourcentdomain CONTAINS "embargo-tickets.com" OR sourcentdomain CONTAINS "events-de.com" OR sourcentdomain CONTAINS "games-future.com" OR sourcentdomain CONTAINS "m1-arena.com" OR sourcentdomain CONTAINS "nov-at.com" OR sourcentdomain CONTAINS "polina-gagarina.com" OR sourcentdomain CONTAINS "teatr-ermolovoy.ru" OR sourcentdomain CONTAINS "teatrestrada.com" OR sourcentdomain CONTAINS "volya-tickets.ru" OR sourcentdomain CONTAINS "guf-tickets.ru" OR sourcentdomain CONTAINS "leningrad-tickets.ru" OR sourcentdomain CONTAINS "ticketparis24.com" OR sourcentdomain CONTAINS "bricskz2024.com" OR sourcentdomain CONTAINS "msport-arena.ru" OR sourcentdomain CONTAINS "musicatheatre.com" OR sourcentdomain CONTAINS "philkassa-spb.com" OR sourcentdomain CONTAINS "torpedo-moscow.com" OR sourcentdomain CONTAINS "ufc308.com" OR sourcentdomain CONTAINS "saburov-nurlan.com" OR sourcentdomain CONTAINS "ural-pelmeny.ru" OR sourcentdomain CONTAINS "bilet-v-kreml.com" OR sourcentdomain CONTAINS "dinamo-arena.com" OR sourcentdomain CONTAINS "icearena-nn.com" OR sourcentdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "gofuture-games.com" OR sourcehostname CONTAINS "greenteatr.ru" OR sourcehostname CONTAINS "league-nations.com" OR sourcehostname CONTAINS "acdc-tickets.com" OR sourcehostname CONTAINS "afishatheatreballet.com" OR sourcehostname CONTAINS "alessafina-tour.com" OR sourcehostname CONTAINS "ticket-paris24.com" OR sourcehostname CONTAINS "circbilet.ru" OR sourcehostname CONTAINS "cska-ticketsstore.com" OR sourcehostname CONTAINS "kaz-theatre.com" OR sourcehostname CONTAINS "nikulin-circ.ru" OR sourcehostname CONTAINS "concert-knyazz.ru" OR sourcehostname CONTAINS "danceopentheatre.com" OR sourcehostname CONTAINS "tickets-hcska.com" OR sourcehostname CONTAINS "arena-kassa.com" OR sourcehostname CONTAINS "ekb-arena-kassa.ru" OR sourcehostname CONTAINS "ekb-stadium.ru" OR sourcehostname CONTAINS "euro2024-ticketing.com" OR sourcehostname CONTAINS "kosmos-kkt.com" OR sourcehostname CONTAINS "krasnodar-arena-kassa.ru" OR sourcehostname CONTAINS "lukoil-arena-kassa.ru" OR sourcehostname CONTAINS "rostov-arena-kassa.ru" OR sourcehostname CONTAINS "samara-arena-kassa.ru" OR sourcehostname CONTAINS "16-tons.ru" OR sourcehostname CONTAINS "afisharoof.com" OR sourcehostname CONTAINS "danceopentheater.com" OR sourcehostname CONTAINS "embargo-tickets.com" OR sourcehostname CONTAINS "events-de.com" OR sourcehostname CONTAINS "games-future.com" OR sourcehostname CONTAINS "m1-arena.com" OR sourcehostname CONTAINS "nov-at.com" OR sourcehostname CONTAINS "polina-gagarina.com" OR sourcehostname CONTAINS "teatr-ermolovoy.ru" OR sourcehostname CONTAINS "teatrestrada.com" OR sourcehostname CONTAINS "volya-tickets.ru" OR sourcehostname CONTAINS "guf-tickets.ru" OR sourcehostname CONTAINS "leningrad-tickets.ru" OR sourcehostname CONTAINS "ticketparis24.com" OR sourcehostname CONTAINS "bricskz2024.com" OR sourcehostname CONTAINS "msport-arena.ru" OR sourcehostname CONTAINS "musicatheatre.com" OR sourcehostname CONTAINS "philkassa-spb.com" OR sourcehostname CONTAINS "torpedo-moscow.com" OR sourcehostname CONTAINS "ufc308.com" OR sourcehostname CONTAINS "saburov-nurlan.com" OR sourcehostname CONTAINS "ural-pelmeny.ru" OR sourcehostname CONTAINS "bilet-v-kreml.com" OR sourcehostname CONTAINS "dinamo-arena.com" OR sourcehostname CONTAINS "icearena-nn.com" OR sourcehostname CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "gofuture-games.com" OR destinationntdomain CONTAINS "greenteatr.ru" OR destinationntdomain CONTAINS "league-nations.com" OR destinationntdomain CONTAINS "acdc-tickets.com" OR destinationntdomain CONTAINS "afishatheatreballet.com" OR destinationntdomain CONTAINS "alessafina-tour.com" OR destinationntdomain CONTAINS "ticket-paris24.com" OR destinationntdomain CONTAINS "circbilet.ru" OR destinationntdomain CONTAINS "cska-ticketsstore.com" OR destinationntdomain CONTAINS "kaz-theatre.com" OR destinationntdomain CONTAINS "nikulin-circ.ru" OR destinationntdomain CONTAINS "concert-knyazz.ru" OR destinationntdomain CONTAINS "danceopentheatre.com" OR destinationntdomain CONTAINS "tickets-hcska.com" OR destinationntdomain CONTAINS "arena-kassa.com" OR destinationntdomain CONTAINS "ekb-arena-kassa.ru" OR destinationntdomain CONTAINS "ekb-stadium.ru" OR destinationntdomain CONTAINS "euro2024-ticketing.com" OR destinationntdomain CONTAINS "kosmos-kkt.com" OR destinationntdomain CONTAINS "krasnodar-arena-kassa.ru" OR destinationntdomain CONTAINS "lukoil-arena-kassa.ru" OR destinationntdomain CONTAINS "rostov-arena-kassa.ru" OR destinationntdomain CONTAINS "samara-arena-kassa.ru" OR destinationntdomain CONTAINS "16-tons.ru" OR destinationntdomain CONTAINS "afisharoof.com" OR destinationntdomain CONTAINS "danceopentheater.com" OR destinationntdomain CONTAINS "embargo-tickets.com" OR destinationntdomain CONTAINS "events-de.com" OR destinationntdomain CONTAINS "games-future.com" OR destinationntdomain CONTAINS "m1-arena.com" OR destinationntdomain CONTAINS "nov-at.com" OR destinationntdomain CONTAINS "polina-gagarina.com" OR destinationntdomain CONTAINS "teatr-ermolovoy.ru" OR destinationntdomain CONTAINS "teatrestrada.com" OR destinationntdomain CONTAINS "volya-tickets.ru" OR destinationntdomain CONTAINS "guf-tickets.ru" OR destinationntdomain CONTAINS "leningrad-tickets.ru" OR destinationntdomain CONTAINS "ticketparis24.com" OR destinationntdomain CONTAINS "bricskz2024.com" OR destinationntdomain CONTAINS "msport-arena.ru" OR destinationntdomain CONTAINS "musicatheatre.com" OR destinationntdomain CONTAINS "philkassa-spb.com" OR destinationntdomain CONTAINS "torpedo-moscow.com" OR destinationntdomain CONTAINS "ufc308.com" OR destinationntdomain CONTAINS "saburov-nurlan.com" OR destinationntdomain CONTAINS "ural-pelmeny.ru" OR destinationntdomain CONTAINS "bilet-v-kreml.com" OR destinationntdomain CONTAINS "dinamo-arena.com" OR destinationntdomain CONTAINS "icearena-nn.com" OR destinationntdomain CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "gofuture-games.com" OR requesturl CONTAINS "greenteatr.ru" OR requesturl CONTAINS "league-nations.com" OR requesturl CONTAINS "acdc-tickets.com" OR requesturl CONTAINS "afishatheatreballet.com" OR requesturl CONTAINS "alessafina-tour.com" OR requesturl CONTAINS "ticket-paris24.com" OR requesturl CONTAINS "circbilet.ru" OR requesturl CONTAINS "cska-ticketsstore.com" OR requesturl CONTAINS "kaz-theatre.com" OR requesturl CONTAINS "nikulin-circ.ru" OR requesturl CONTAINS "concert-knyazz.ru" OR requesturl CONTAINS "danceopentheatre.com" OR requesturl CONTAINS "tickets-hcska.com" OR requesturl CONTAINS "arena-kassa.com" OR requesturl CONTAINS "ekb-arena-kassa.ru" OR requesturl CONTAINS "ekb-stadium.ru" OR requesturl CONTAINS "euro2024-ticketing.com" OR requesturl CONTAINS "kosmos-kkt.com" OR requesturl CONTAINS "krasnodar-arena-kassa.ru" OR requesturl CONTAINS "lukoil-arena-kassa.ru" OR requesturl CONTAINS "rostov-arena-kassa.ru" OR requesturl CONTAINS "samara-arena-kassa.ru" OR requesturl CONTAINS "16-tons.ru" OR requesturl CONTAINS "afisharoof.com" OR requesturl CONTAINS "danceopentheater.com" OR requesturl CONTAINS "embargo-tickets.com" OR requesturl CONTAINS "events-de.com" OR requesturl CONTAINS "games-future.com" OR requesturl CONTAINS "m1-arena.com" OR requesturl CONTAINS "nov-at.com" OR requesturl CONTAINS "polina-gagarina.com" OR requesturl CONTAINS "teatr-ermolovoy.ru" OR requesturl CONTAINS "teatrestrada.com" OR requesturl CONTAINS "volya-tickets.ru" OR requesturl CONTAINS "guf-tickets.ru" OR requesturl CONTAINS "leningrad-tickets.ru" OR requesturl CONTAINS "ticketparis24.com" OR requesturl CONTAINS "bricskz2024.com" OR requesturl CONTAINS "msport-arena.ru" OR requesturl CONTAINS "musicatheatre.com" OR requesturl CONTAINS "philkassa-spb.com" OR requesturl CONTAINS "torpedo-moscow.com" OR requesturl CONTAINS "ufc308.com" OR requesturl CONTAINS "saburov-nurlan.com" OR requesturl CONTAINS "ural-pelmeny.ru" OR requesturl CONTAINS "bilet-v-kreml.com" OR requesturl CONTAINS "dinamo-arena.com" OR requesturl CONTAINS "icearena-nn.com" OR requesturl CONTAINS "mayakovsky-theater.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mdramtheatre.com" OR destinationhostname CONTAINS "novgorod-basket.ru" OR destinationhostname CONTAINS "tickets-iihf.com" OR destinationhostname CONTAINS "ticket-supercup.com" OR destinationhostname CONTAINS "tktseller.com" OR destinationhostname CONTAINS "vegashall-tickets.com" OR destinationhostname CONTAINS "1930-moscow.com" OR destinationhostname CONTAINS "afisha-bconcert.ru" OR destinationhostname CONTAINS "capkassa-spb.com" OR destinationhostname CONTAINS "championat-football.com" OR destinationhostname CONTAINS "dommusic-kassa.ru" OR destinationhostname CONTAINS "gazarena-tickets.ru" OR destinationhostname CONTAINS "kvytkyfootball.com.ua" OR destinationhostname CONTAINS "maksimconcert.com" OR destinationhostname CONTAINS "m-bronaya.com" OR destinationhostname CONTAINS "sovremennik-kassa.com" OR destinationhostname CONTAINS "tickets-eltonjohn.com" OR destinationhostname CONTAINS "yaballettheatre.com" OR destinationhostname CONTAINS "ticketofficellc.com" OR destinationhostname CONTAINS "ticket-vkfest.com" OR destinationhostname CONTAINS "arena-coca-cola.com" OR destinationhostname CONTAINS "gamesfriendship.com" OR destinationhostname CONTAINS "ticketwhitenight.com" OR destinationhostname CONTAINS "vahtangafisha.ru" OR destinationhostname CONTAINS "aida-garifullina.ru" OR destinationhostname CONTAINS "ddt-tickets.ru" OR destinationhostname CONTAINS "zemfira.ge" OR destinationhostname CONTAINS "bricskz24.com" OR destinationhostname CONTAINS "hc-dynamo.ru" OR destinationhostname CONTAINS "sportgameskz24.com" OR destinationhostname CONTAINS "30secondstomars-tickets.ru" OR destinationhostname CONTAINS "30secondstomars-tour.com" OR destinationhostname CONTAINS "bratskycup2024.ru" OR destinationhostname CONTAINS "icepalace-kassa.com" OR destinationhostname CONTAINS "sting-tickets.ru" OR destinationhostname CONTAINS "closed-link.com" OR destinationhostname CONTAINS "concerts.md" OR destinationhostname CONTAINS "dinamomx.ru" OR destinationhostname CONTAINS "l-arena.com" OR destinationhostname CONTAINS "stage-tickets.com" OR destinationhostname CONTAINS "tna-afisha.ru" OR destinationhostname CONTAINS "baltika-ticket.ru" OR destinationhostname CONTAINS "baltika-tickets.ru" OR destinationhostname CONTAINS "barvikha-luxury-village.ru" OR destinationhostname CONTAINS "concertgiopika.com" OR destinationhostname CONTAINS "elki-tickets.ru" OR destinationhostname CONTAINS "fcloko-ticket.ru" OR destinationhostname CONTAINS "moscowtyz-tickets.ru" OR destinationhostname CONTAINS "moskvarium-tickets.ru" OR destinationhostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mdramtheatre.com" OR sourcentdomain CONTAINS "novgorod-basket.ru" OR sourcentdomain CONTAINS "tickets-iihf.com" OR sourcentdomain CONTAINS "ticket-supercup.com" OR sourcentdomain CONTAINS "tktseller.com" OR sourcentdomain CONTAINS "vegashall-tickets.com" OR sourcentdomain CONTAINS "1930-moscow.com" OR sourcentdomain CONTAINS "afisha-bconcert.ru" OR sourcentdomain CONTAINS "capkassa-spb.com" OR sourcentdomain CONTAINS "championat-football.com" OR sourcentdomain CONTAINS "dommusic-kassa.ru" OR sourcentdomain CONTAINS "gazarena-tickets.ru" OR sourcentdomain CONTAINS "kvytkyfootball.com.ua" OR sourcentdomain CONTAINS "maksimconcert.com" OR sourcentdomain CONTAINS "m-bronaya.com" OR sourcentdomain CONTAINS "sovremennik-kassa.com" OR sourcentdomain CONTAINS "tickets-eltonjohn.com" OR sourcentdomain CONTAINS "yaballettheatre.com" OR sourcentdomain CONTAINS "ticketofficellc.com" OR sourcentdomain CONTAINS "ticket-vkfest.com" OR sourcentdomain CONTAINS "arena-coca-cola.com" OR sourcentdomain CONTAINS "gamesfriendship.com" OR sourcentdomain CONTAINS "ticketwhitenight.com" OR sourcentdomain CONTAINS "vahtangafisha.ru" OR sourcentdomain CONTAINS "aida-garifullina.ru" OR sourcentdomain CONTAINS "ddt-tickets.ru" OR sourcentdomain CONTAINS "zemfira.ge" OR sourcentdomain CONTAINS "bricskz24.com" OR sourcentdomain CONTAINS "hc-dynamo.ru" OR sourcentdomain CONTAINS "sportgameskz24.com" OR sourcentdomain CONTAINS "30secondstomars-tickets.ru" OR sourcentdomain CONTAINS "30secondstomars-tour.com" OR sourcentdomain CONTAINS "bratskycup2024.ru" OR sourcentdomain CONTAINS "icepalace-kassa.com" OR sourcentdomain CONTAINS "sting-tickets.ru" OR sourcentdomain CONTAINS "closed-link.com" OR sourcentdomain CONTAINS "concerts.md" OR sourcentdomain CONTAINS "dinamomx.ru" OR sourcentdomain CONTAINS "l-arena.com" OR sourcentdomain CONTAINS "stage-tickets.com" OR sourcentdomain CONTAINS "tna-afisha.ru" OR sourcentdomain CONTAINS "baltika-ticket.ru" OR sourcentdomain CONTAINS "baltika-tickets.ru" OR sourcentdomain CONTAINS "barvikha-luxury-village.ru" OR sourcentdomain CONTAINS "concertgiopika.com" OR sourcentdomain CONTAINS "elki-tickets.ru" OR sourcentdomain CONTAINS "fcloko-ticket.ru" OR sourcentdomain CONTAINS "moscowtyz-tickets.ru" OR sourcentdomain CONTAINS "moskvarium-tickets.ru" OR sourcentdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mdramtheatre.com" OR sourcehostname CONTAINS "novgorod-basket.ru" OR sourcehostname CONTAINS "tickets-iihf.com" OR sourcehostname CONTAINS "ticket-supercup.com" OR sourcehostname CONTAINS "tktseller.com" OR sourcehostname CONTAINS "vegashall-tickets.com" OR sourcehostname CONTAINS "1930-moscow.com" OR sourcehostname CONTAINS "afisha-bconcert.ru" OR sourcehostname CONTAINS "capkassa-spb.com" OR sourcehostname CONTAINS "championat-football.com" OR sourcehostname CONTAINS "dommusic-kassa.ru" OR sourcehostname CONTAINS "gazarena-tickets.ru" OR sourcehostname CONTAINS "kvytkyfootball.com.ua" OR sourcehostname CONTAINS "maksimconcert.com" OR sourcehostname CONTAINS "m-bronaya.com" OR sourcehostname CONTAINS "sovremennik-kassa.com" OR sourcehostname CONTAINS "tickets-eltonjohn.com" OR sourcehostname CONTAINS "yaballettheatre.com" OR sourcehostname CONTAINS "ticketofficellc.com" OR sourcehostname CONTAINS "ticket-vkfest.com" OR sourcehostname CONTAINS "arena-coca-cola.com" OR sourcehostname CONTAINS "gamesfriendship.com" OR sourcehostname CONTAINS "ticketwhitenight.com" OR sourcehostname CONTAINS "vahtangafisha.ru" OR sourcehostname CONTAINS "aida-garifullina.ru" OR sourcehostname CONTAINS "ddt-tickets.ru" OR sourcehostname CONTAINS "zemfira.ge" OR sourcehostname CONTAINS "bricskz24.com" OR sourcehostname CONTAINS "hc-dynamo.ru" OR sourcehostname CONTAINS "sportgameskz24.com" OR sourcehostname CONTAINS "30secondstomars-tickets.ru" OR sourcehostname CONTAINS "30secondstomars-tour.com" OR sourcehostname CONTAINS "bratskycup2024.ru" OR sourcehostname CONTAINS "icepalace-kassa.com" OR sourcehostname CONTAINS "sting-tickets.ru" OR sourcehostname CONTAINS "closed-link.com" OR sourcehostname CONTAINS "concerts.md" OR sourcehostname CONTAINS "dinamomx.ru" OR sourcehostname CONTAINS "l-arena.com" OR sourcehostname CONTAINS "stage-tickets.com" OR sourcehostname CONTAINS "tna-afisha.ru" OR sourcehostname CONTAINS "baltika-ticket.ru" OR sourcehostname CONTAINS "baltika-tickets.ru" OR sourcehostname CONTAINS "barvikha-luxury-village.ru" OR sourcehostname CONTAINS "concertgiopika.com" OR sourcehostname CONTAINS "elki-tickets.ru" OR sourcehostname CONTAINS "fcloko-ticket.ru" OR sourcehostname CONTAINS "moscowtyz-tickets.ru" OR sourcehostname CONTAINS "moskvarium-tickets.ru" OR sourcehostname CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mdramtheatre.com" OR destinationntdomain CONTAINS "novgorod-basket.ru" OR destinationntdomain CONTAINS "tickets-iihf.com" OR destinationntdomain CONTAINS "ticket-supercup.com" OR destinationntdomain CONTAINS "tktseller.com" OR destinationntdomain CONTAINS "vegashall-tickets.com" OR destinationntdomain CONTAINS "1930-moscow.com" OR destinationntdomain CONTAINS "afisha-bconcert.ru" OR destinationntdomain CONTAINS "capkassa-spb.com" OR destinationntdomain CONTAINS "championat-football.com" OR destinationntdomain CONTAINS "dommusic-kassa.ru" OR destinationntdomain CONTAINS "gazarena-tickets.ru" OR destinationntdomain CONTAINS "kvytkyfootball.com.ua" OR destinationntdomain CONTAINS "maksimconcert.com" OR destinationntdomain CONTAINS "m-bronaya.com" OR destinationntdomain CONTAINS "sovremennik-kassa.com" OR destinationntdomain CONTAINS "tickets-eltonjohn.com" OR destinationntdomain CONTAINS "yaballettheatre.com" OR destinationntdomain CONTAINS "ticketofficellc.com" OR destinationntdomain CONTAINS "ticket-vkfest.com" OR destinationntdomain CONTAINS "arena-coca-cola.com" OR destinationntdomain CONTAINS "gamesfriendship.com" OR destinationntdomain CONTAINS "ticketwhitenight.com" OR destinationntdomain CONTAINS "vahtangafisha.ru" OR destinationntdomain CONTAINS "aida-garifullina.ru" OR destinationntdomain CONTAINS "ddt-tickets.ru" OR destinationntdomain CONTAINS "zemfira.ge" OR destinationntdomain CONTAINS "bricskz24.com" OR destinationntdomain CONTAINS "hc-dynamo.ru" OR destinationntdomain CONTAINS "sportgameskz24.com" OR destinationntdomain CONTAINS "30secondstomars-tickets.ru" OR destinationntdomain CONTAINS "30secondstomars-tour.com" OR destinationntdomain CONTAINS "bratskycup2024.ru" OR destinationntdomain CONTAINS "icepalace-kassa.com" OR destinationntdomain CONTAINS "sting-tickets.ru" OR destinationntdomain CONTAINS "closed-link.com" OR destinationntdomain CONTAINS "concerts.md" OR destinationntdomain CONTAINS "dinamomx.ru" OR destinationntdomain CONTAINS "l-arena.com" OR destinationntdomain CONTAINS "stage-tickets.com" OR destinationntdomain CONTAINS "tna-afisha.ru" OR destinationntdomain CONTAINS "baltika-ticket.ru" OR destinationntdomain CONTAINS "baltika-tickets.ru" OR destinationntdomain CONTAINS "barvikha-luxury-village.ru" OR destinationntdomain CONTAINS "concertgiopika.com" OR destinationntdomain CONTAINS "elki-tickets.ru" OR destinationntdomain CONTAINS "fcloko-ticket.ru" OR destinationntdomain CONTAINS "moscowtyz-tickets.ru" OR destinationntdomain CONTAINS "moskvarium-tickets.ru" OR destinationntdomain CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "mdramtheatre.com" OR requesturl CONTAINS "novgorod-basket.ru" OR requesturl CONTAINS "tickets-iihf.com" OR requesturl CONTAINS "ticket-supercup.com" OR requesturl CONTAINS "tktseller.com" OR requesturl CONTAINS "vegashall-tickets.com" OR requesturl CONTAINS "1930-moscow.com" OR requesturl CONTAINS "afisha-bconcert.ru" OR requesturl CONTAINS "capkassa-spb.com" OR requesturl CONTAINS "championat-football.com" OR requesturl CONTAINS "dommusic-kassa.ru" OR requesturl CONTAINS "gazarena-tickets.ru" OR requesturl CONTAINS "kvytkyfootball.com.ua" OR requesturl CONTAINS "maksimconcert.com" OR requesturl CONTAINS "m-bronaya.com" OR requesturl CONTAINS "sovremennik-kassa.com" OR requesturl CONTAINS "tickets-eltonjohn.com" OR requesturl CONTAINS "yaballettheatre.com" OR requesturl CONTAINS "ticketofficellc.com" OR requesturl CONTAINS "ticket-vkfest.com" OR requesturl CONTAINS "arena-coca-cola.com" OR requesturl CONTAINS "gamesfriendship.com" OR requesturl CONTAINS "ticketwhitenight.com" OR requesturl CONTAINS "vahtangafisha.ru" OR requesturl CONTAINS "aida-garifullina.ru" OR requesturl CONTAINS "ddt-tickets.ru" OR requesturl CONTAINS "zemfira.ge" OR requesturl CONTAINS "bricskz24.com" OR requesturl CONTAINS "hc-dynamo.ru" OR requesturl CONTAINS "sportgameskz24.com" OR requesturl CONTAINS "30secondstomars-tickets.ru" OR requesturl CONTAINS "30secondstomars-tour.com" OR requesturl CONTAINS "bratskycup2024.ru" OR requesturl CONTAINS "icepalace-kassa.com" OR requesturl CONTAINS "sting-tickets.ru" OR requesturl CONTAINS "closed-link.com" OR requesturl CONTAINS "concerts.md" OR requesturl CONTAINS "dinamomx.ru" OR requesturl CONTAINS "l-arena.com" OR requesturl CONTAINS "stage-tickets.com" OR requesturl CONTAINS "tna-afisha.ru" OR requesturl CONTAINS "baltika-ticket.ru" OR requesturl CONTAINS "baltika-tickets.ru" OR requesturl CONTAINS "barvikha-luxury-village.ru" OR requesturl CONTAINS "concertgiopika.com" OR requesturl CONTAINS "elki-tickets.ru" OR requesturl CONTAINS "fcloko-ticket.ru" OR requesturl CONTAINS "moscowtyz-tickets.ru" OR requesturl CONTAINS "moskvarium-tickets.ru" OR requesturl CONTAINS "one-re.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "operetta-afisha.ru" OR destinationhostname CONTAINS "portalbileti.ge" OR destinationhostname CONTAINS "ramt-afisha.ru" OR destinationhostname CONTAINS "samara.arena-kassa.ru" OR destinationhostname CONTAINS "ticket-concierge.com" OR destinationhostname CONTAINS "ticket-rfs.ru" OR destinationhostname CONTAINS "vtb.arena-kassa.com" OR destinationhostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "operetta-afisha.ru" OR sourcentdomain CONTAINS "portalbileti.ge" OR sourcentdomain CONTAINS "ramt-afisha.ru" OR sourcentdomain CONTAINS "samara.arena-kassa.ru" OR sourcentdomain CONTAINS "ticket-concierge.com" OR sourcentdomain CONTAINS "ticket-rfs.ru" OR sourcentdomain CONTAINS "vtb.arena-kassa.com" OR sourcentdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "operetta-afisha.ru" OR sourcehostname CONTAINS "portalbileti.ge" OR sourcehostname CONTAINS "ramt-afisha.ru" OR sourcehostname CONTAINS "samara.arena-kassa.ru" OR sourcehostname CONTAINS "ticket-concierge.com" OR sourcehostname CONTAINS "ticket-rfs.ru" OR sourcehostname CONTAINS "vtb.arena-kassa.com" OR sourcehostname CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "operetta-afisha.ru" OR destinationntdomain CONTAINS "portalbileti.ge" OR destinationntdomain CONTAINS "ramt-afisha.ru" OR destinationntdomain CONTAINS "samara.arena-kassa.ru" OR destinationntdomain CONTAINS "ticket-concierge.com" OR destinationntdomain CONTAINS "ticket-rfs.ru" OR destinationntdomain CONTAINS "vtb.arena-kassa.com" OR destinationntdomain CONTAINS "zimnii-ticket.ru")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "operetta-afisha.ru" OR requesturl CONTAINS "portalbileti.ge" OR requesturl CONTAINS "ramt-afisha.ru" OR requesturl CONTAINS "samara.arena-kassa.ru" OR requesturl CONTAINS "ticket-concierge.com" OR requesturl CONTAINS "ticket-rfs.ru" OR requesturl CONTAINS "vtb.arena-kassa.com" OR requesturl CONTAINS "zimnii-ticket.ru")
