index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c013b2be04364216421dbec58c254bca979adff55ce7263bcd4da8ada7dd692f","12ca8f878e412b475375bfa05ef9782fa703d0a9c9bb33f6d21eba2f6b8e1c29","388292015e4c2d075b935a8299d99335d957e3ad5134a33f28c4dc7f5e3687c5","e33254e2ad4d279914a29450f98d1750a9f513fc8ddb853e0dd8346b805faa43","04e27134490848fda6a4fc5abaa4001d36bc222f0b1098698573c510e3af69c8","4322269fa75f84f6d21dd1e334fe01541ae55a6bed21d8ea7ea26b9bd2bff499","0d1caeae9e59a10b6b52ffb7687966ec6b0c2f0f36b8d76657d51f1aa57cd737")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "biohackingz.one" OR destinationhostname CONTAINS "alhazmteam.com" OR destinationhostname CONTAINS "alternativesclimat.net" OR destinationhostname CONTAINS "bantipco.xyz" OR destinationhostname CONTAINS "bbundle.com" OR destinationhostname CONTAINS "brandiforcolleyville.com" OR destinationhostname CONTAINS "cddy2.com" OR destinationhostname CONTAINS "certice.farm" OR destinationhostname CONTAINS "changethewayyouseegreen.com" OR destinationhostname CONTAINS "clearlakefishin.com" OR destinationhostname CONTAINS "codigoderedenmexico.info" OR destinationhostname CONTAINS "coralsiren.com" OR destinationhostname CONTAINS "corporatespiral.com" OR destinationhostname CONTAINS "crimeawartoken.com" OR destinationhostname CONTAINS "cryptocdes.biz" OR destinationhostname CONTAINS "cryptopaid.cloud" OR destinationhostname CONTAINS "depress-elastic.com" OR destinationhostname CONTAINS "don-fago.website" OR destinationhostname CONTAINS "elartedelabelleza.com" OR destinationhostname CONTAINS "extractword.com" OR destinationhostname CONTAINS "flawlesscity.com" OR destinationhostname CONTAINS "freemy.solar" OR destinationhostname CONTAINS "gymzf.xyz" OR destinationhostname CONTAINS "harmony-impactcapital.com" OR destinationhostname CONTAINS "harryhoppe.com" OR destinationhostname CONTAINS "hauyuancg.com" OR destinationhostname CONTAINS "hwcstl.com" OR destinationhostname CONTAINS "ibuybuffalony.com" OR destinationhostname CONTAINS "junzibuluo.com" OR destinationhostname CONTAINS "keepwaterintheplants.com" OR destinationhostname CONTAINS "listgrind.com" OR destinationhostname CONTAINS "lojanivelup.site" OR destinationhostname CONTAINS "lovelyveganfoods.com" OR destinationhostname CONTAINS "masfddj.com" OR destinationhostname CONTAINS "maximizeprofit.store" OR destinationhostname CONTAINS "mfa-azubi.com" OR destinationhostname CONTAINS "moneti.site" OR destinationhostname CONTAINS "mybiatromd.com" OR destinationhostname CONTAINS "nftgiveaways.one" OR destinationhostname CONTAINS "olympiacosmeticdentist.com" OR destinationhostname CONTAINS "pharmadermis.com" OR destinationhostname CONTAINS "pleasenamemyfart.com" OR destinationhostname CONTAINS "psnews.today" OR destinationhostname CONTAINS "puls180.net" OR destinationhostname CONTAINS "qqdy218.xyz" OR destinationhostname CONTAINS "qqix.xyz" OR destinationhostname CONTAINS "r3mixlogistics.com" OR destinationhostname CONTAINS "radiotec-solutions.com" OR destinationhostname CONTAINS "roosterpoll.com" OR destinationhostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "biohackingz.one" OR sourcentdomain CONTAINS "alhazmteam.com" OR sourcentdomain CONTAINS "alternativesclimat.net" OR sourcentdomain CONTAINS "bantipco.xyz" OR sourcentdomain CONTAINS "bbundle.com" OR sourcentdomain CONTAINS "brandiforcolleyville.com" OR sourcentdomain CONTAINS "cddy2.com" OR sourcentdomain CONTAINS "certice.farm" OR sourcentdomain CONTAINS "changethewayyouseegreen.com" OR sourcentdomain CONTAINS "clearlakefishin.com" OR sourcentdomain CONTAINS "codigoderedenmexico.info" OR sourcentdomain CONTAINS "coralsiren.com" OR sourcentdomain CONTAINS "corporatespiral.com" OR sourcentdomain CONTAINS "crimeawartoken.com" OR sourcentdomain CONTAINS "cryptocdes.biz" OR sourcentdomain CONTAINS "cryptopaid.cloud" OR sourcentdomain CONTAINS "depress-elastic.com" OR sourcentdomain CONTAINS "don-fago.website" OR sourcentdomain CONTAINS "elartedelabelleza.com" OR sourcentdomain CONTAINS "extractword.com" OR sourcentdomain CONTAINS "flawlesscity.com" OR sourcentdomain CONTAINS "freemy.solar" OR sourcentdomain CONTAINS "gymzf.xyz" OR sourcentdomain CONTAINS "harmony-impactcapital.com" OR sourcentdomain CONTAINS "harryhoppe.com" OR sourcentdomain CONTAINS "hauyuancg.com" OR sourcentdomain CONTAINS "hwcstl.com" OR sourcentdomain CONTAINS "ibuybuffalony.com" OR sourcentdomain CONTAINS "junzibuluo.com" OR sourcentdomain CONTAINS "keepwaterintheplants.com" OR sourcentdomain CONTAINS "listgrind.com" OR sourcentdomain CONTAINS "lojanivelup.site" OR sourcentdomain CONTAINS "lovelyveganfoods.com" OR sourcentdomain CONTAINS "masfddj.com" OR sourcentdomain CONTAINS "maximizeprofit.store" OR sourcentdomain CONTAINS "mfa-azubi.com" OR sourcentdomain CONTAINS "moneti.site" OR sourcentdomain CONTAINS "mybiatromd.com" OR sourcentdomain CONTAINS "nftgiveaways.one" OR sourcentdomain CONTAINS "olympiacosmeticdentist.com" OR sourcentdomain CONTAINS "pharmadermis.com" OR sourcentdomain CONTAINS "pleasenamemyfart.com" OR sourcentdomain CONTAINS "psnews.today" OR sourcentdomain CONTAINS "puls180.net" OR sourcentdomain CONTAINS "qqdy218.xyz" OR sourcentdomain CONTAINS "qqix.xyz" OR sourcentdomain CONTAINS "r3mixlogistics.com" OR sourcentdomain CONTAINS "radiotec-solutions.com" OR sourcentdomain CONTAINS "roosterpoll.com" OR sourcentdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "biohackingz.one" OR sourcehostname CONTAINS "alhazmteam.com" OR sourcehostname CONTAINS "alternativesclimat.net" OR sourcehostname CONTAINS "bantipco.xyz" OR sourcehostname CONTAINS "bbundle.com" OR sourcehostname CONTAINS "brandiforcolleyville.com" OR sourcehostname CONTAINS "cddy2.com" OR sourcehostname CONTAINS "certice.farm" OR sourcehostname CONTAINS "changethewayyouseegreen.com" OR sourcehostname CONTAINS "clearlakefishin.com" OR sourcehostname CONTAINS "codigoderedenmexico.info" OR sourcehostname CONTAINS "coralsiren.com" OR sourcehostname CONTAINS "corporatespiral.com" OR sourcehostname CONTAINS "crimeawartoken.com" OR sourcehostname CONTAINS "cryptocdes.biz" OR sourcehostname CONTAINS "cryptopaid.cloud" OR sourcehostname CONTAINS "depress-elastic.com" OR sourcehostname CONTAINS "don-fago.website" OR sourcehostname CONTAINS "elartedelabelleza.com" OR sourcehostname CONTAINS "extractword.com" OR sourcehostname CONTAINS "flawlesscity.com" OR sourcehostname CONTAINS "freemy.solar" OR sourcehostname CONTAINS "gymzf.xyz" OR sourcehostname CONTAINS "harmony-impactcapital.com" OR sourcehostname CONTAINS "harryhoppe.com" OR sourcehostname CONTAINS "hauyuancg.com" OR sourcehostname CONTAINS "hwcstl.com" OR sourcehostname CONTAINS "ibuybuffalony.com" OR sourcehostname CONTAINS "junzibuluo.com" OR sourcehostname CONTAINS "keepwaterintheplants.com" OR sourcehostname CONTAINS "listgrind.com" OR sourcehostname CONTAINS "lojanivelup.site" OR sourcehostname CONTAINS "lovelyveganfoods.com" OR sourcehostname CONTAINS "masfddj.com" OR sourcehostname CONTAINS "maximizeprofit.store" OR sourcehostname CONTAINS "mfa-azubi.com" OR sourcehostname CONTAINS "moneti.site" OR sourcehostname CONTAINS "mybiatromd.com" OR sourcehostname CONTAINS "nftgiveaways.one" OR sourcehostname CONTAINS "olympiacosmeticdentist.com" OR sourcehostname CONTAINS "pharmadermis.com" OR sourcehostname CONTAINS "pleasenamemyfart.com" OR sourcehostname CONTAINS "psnews.today" OR sourcehostname CONTAINS "puls180.net" OR sourcehostname CONTAINS "qqdy218.xyz" OR sourcehostname CONTAINS "qqix.xyz" OR sourcehostname CONTAINS "r3mixlogistics.com" OR sourcehostname CONTAINS "radiotec-solutions.com" OR sourcehostname CONTAINS "roosterpoll.com" OR sourcehostname CONTAINS "runpa.site")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "biohackingz.one" OR destinationntdomain CONTAINS "alhazmteam.com" OR destinationntdomain CONTAINS "alternativesclimat.net" OR destinationntdomain CONTAINS "bantipco.xyz" OR destinationntdomain CONTAINS "bbundle.com" OR destinationntdomain CONTAINS "brandiforcolleyville.com" OR destinationntdomain CONTAINS "cddy2.com" OR destinationntdomain CONTAINS "certice.farm" OR destinationntdomain CONTAINS "changethewayyouseegreen.com" OR destinationntdomain CONTAINS "clearlakefishin.com" OR destinationntdomain CONTAINS "codigoderedenmexico.info" OR destinationntdomain CONTAINS "coralsiren.com" OR destinationntdomain CONTAINS "corporatespiral.com" OR destinationntdomain CONTAINS "crimeawartoken.com" OR destinationntdomain CONTAINS "cryptocdes.biz" OR destinationntdomain CONTAINS "cryptopaid.cloud" OR destinationntdomain CONTAINS "depress-elastic.com" OR destinationntdomain CONTAINS "don-fago.website" OR destinationntdomain CONTAINS "elartedelabelleza.com" OR destinationntdomain CONTAINS "extractword.com" OR destinationntdomain CONTAINS "flawlesscity.com" OR destinationntdomain CONTAINS "freemy.solar" OR destinationntdomain CONTAINS "gymzf.xyz" OR destinationntdomain CONTAINS "harmony-impactcapital.com" OR destinationntdomain CONTAINS "harryhoppe.com" OR destinationntdomain CONTAINS "hauyuancg.com" OR destinationntdomain CONTAINS "hwcstl.com" OR destinationntdomain CONTAINS "ibuybuffalony.com" OR destinationntdomain CONTAINS "junzibuluo.com" OR destinationntdomain CONTAINS "keepwaterintheplants.com" OR destinationntdomain CONTAINS "listgrind.com" OR destinationntdomain CONTAINS "lojanivelup.site" OR destinationntdomain CONTAINS "lovelyveganfoods.com" OR destinationntdomain CONTAINS "masfddj.com" OR destinationntdomain CONTAINS "maximizeprofit.store" OR destinationntdomain CONTAINS "mfa-azubi.com" OR destinationntdomain CONTAINS "moneti.site" OR destinationntdomain CONTAINS "mybiatromd.com" OR destinationntdomain CONTAINS "nftgiveaways.one" OR destinationntdomain CONTAINS "olympiacosmeticdentist.com" OR destinationntdomain CONTAINS "pharmadermis.com" OR destinationntdomain CONTAINS "pleasenamemyfart.com" OR destinationntdomain CONTAINS "psnews.today" OR destinationntdomain CONTAINS "puls180.net" OR destinationntdomain CONTAINS "qqdy218.xyz" OR destinationntdomain CONTAINS "qqix.xyz" OR destinationntdomain CONTAINS "r3mixlogistics.com" OR destinationntdomain CONTAINS "radiotec-solutions.com" OR destinationntdomain CONTAINS "roosterpoll.com" OR destinationntdomain CONTAINS "runpa.site")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sapi-app.com" OR destinationhostname CONTAINS "schatzbenifits.com" OR destinationhostname CONTAINS "shop-tiger.net" OR destinationhostname CONTAINS "sm207.net" OR destinationhostname CONTAINS "solanahouseoflords.art" OR destinationhostname CONTAINS "solvecodes.com" OR destinationhostname CONTAINS "ssqqzz.xyz" OR destinationhostname CONTAINS "theatelierarch.com" OR destinationhostname CONTAINS "themessingers.com" OR destinationhostname CONTAINS "treeshoes.com" OR destinationhostname CONTAINS "turkcellsuperonline.xyz" OR destinationhostname CONTAINS "vsywd.icu" OR destinationhostname CONTAINS "wahidi.net" OR destinationhostname CONTAINS "wfpcqez.xyz" OR destinationhostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sapi-app.com" OR sourcentdomain CONTAINS "schatzbenifits.com" OR sourcentdomain CONTAINS "shop-tiger.net" OR sourcentdomain CONTAINS "sm207.net" OR sourcentdomain CONTAINS "solanahouseoflords.art" OR sourcentdomain CONTAINS "solvecodes.com" OR sourcentdomain CONTAINS "ssqqzz.xyz" OR sourcentdomain CONTAINS "theatelierarch.com" OR sourcentdomain CONTAINS "themessingers.com" OR sourcentdomain CONTAINS "treeshoes.com" OR sourcentdomain CONTAINS "turkcellsuperonline.xyz" OR sourcentdomain CONTAINS "vsywd.icu" OR sourcentdomain CONTAINS "wahidi.net" OR sourcentdomain CONTAINS "wfpcqez.xyz" OR sourcentdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sapi-app.com" OR sourcehostname CONTAINS "schatzbenifits.com" OR sourcehostname CONTAINS "shop-tiger.net" OR sourcehostname CONTAINS "sm207.net" OR sourcehostname CONTAINS "solanahouseoflords.art" OR sourcehostname CONTAINS "solvecodes.com" OR sourcehostname CONTAINS "ssqqzz.xyz" OR sourcehostname CONTAINS "theatelierarch.com" OR sourcehostname CONTAINS "themessingers.com" OR sourcehostname CONTAINS "treeshoes.com" OR sourcehostname CONTAINS "turkcellsuperonline.xyz" OR sourcehostname CONTAINS "vsywd.icu" OR sourcehostname CONTAINS "wahidi.net" OR sourcehostname CONTAINS "wfpcqez.xyz" OR sourcehostname CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sapi-app.com" OR destinationntdomain CONTAINS "schatzbenifits.com" OR destinationntdomain CONTAINS "shop-tiger.net" OR destinationntdomain CONTAINS "sm207.net" OR destinationntdomain CONTAINS "solanahouseoflords.art" OR destinationntdomain CONTAINS "solvecodes.com" OR destinationntdomain CONTAINS "ssqqzz.xyz" OR destinationntdomain CONTAINS "theatelierarch.com" OR destinationntdomain CONTAINS "themessingers.com" OR destinationntdomain CONTAINS "treeshoes.com" OR destinationntdomain CONTAINS "turkcellsuperonline.xyz" OR destinationntdomain CONTAINS "vsywd.icu" OR destinationntdomain CONTAINS "wahidi.net" OR destinationntdomain CONTAINS "wfpcqez.xyz" OR destinationntdomain CONTAINS "wrhyi.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("www.biohackingz.one")
