def rule(event):
    if all(
        [
            any(
                [
                    event.deep_get("query", default="").endswith("monerohash.com"),
                    event.deep_get("query", default="").endswith("do-dear.com"),
                    event.deep_get("query", default="").endswith("xmrminerpro.com"),
                    event.deep_get("query", default="").endswith("secumine.net"),
                    event.deep_get("query", default="").endswith("xmrpool.com"),
                    event.deep_get("query", default="").endswith("minexmr.org"),
                    event.deep_get("query", default="").endswith("hashanywhere.com"),
                    event.deep_get("query", default="").endswith("xmrget.com"),
                    event.deep_get("query", default="").endswith("mininglottery.eu"),
                    event.deep_get("query", default="").endswith("minergate.com"),
                    event.deep_get("query", default="").endswith("moriaxmr.com"),
                    event.deep_get("query", default="").endswith("multipooler.com"),
                    event.deep_get("query", default="").endswith("moneropools.com"),
                    event.deep_get("query", default="").endswith("xmrpool.eu"),
                    event.deep_get("query", default="").endswith("coolmining.club"),
                    event.deep_get("query", default="").endswith("supportxmr.com"),
                    event.deep_get("query", default="").endswith("minexmr.com"),
                    event.deep_get("query", default="").endswith("hashvault.pro"),
                    event.deep_get("query", default="").endswith("xmrpool.net"),
                    event.deep_get("query", default="").endswith("crypto-pool.fr"),
                    event.deep_get("query", default="").endswith("xmr.pt"),
                    event.deep_get("query", default="").endswith("miner.rocks"),
                    event.deep_get("query", default="").endswith("walpool.com"),
                    event.deep_get("query", default="").endswith("herominers.com"),
                    event.deep_get("query", default="").endswith("gntl.co.uk"),
                    event.deep_get("query", default="").endswith("semipool.com"),
                    event.deep_get("query", default="").endswith("coinfoundry.org"),
                    event.deep_get("query", default="").endswith("cryptoknight.cc"),
                    event.deep_get("query", default="").endswith("fairhash.org"),
                    event.deep_get("query", default="").endswith("baikalmine.com"),
                    event.deep_get("query", default="").endswith("tubepool.xyz"),
                    event.deep_get("query", default="").endswith("fairpool.xyz"),
                    event.deep_get("query", default="").endswith("asiapool.io"),
                    event.deep_get("query", default="").endswith("coinpoolit.webhop.me"),
                    event.deep_get("query", default="").endswith("nanopool.org"),
                    event.deep_get("query", default="").endswith("moneropool.com"),
                    event.deep_get("query", default="").endswith("miner.center"),
                    event.deep_get("query", default="").endswith("prohash.net"),
                    event.deep_get("query", default="").endswith("poolto.be"),
                    event.deep_get("query", default="").endswith("cryptoescrow.eu"),
                    event.deep_get("query", default="").endswith("monerominers.net"),
                    event.deep_get("query", default="").endswith("cryptonotepool.org"),
                    event.deep_get("query", default="").endswith("extrmepool.org"),
                    event.deep_get("query", default="").endswith("webcoin.me"),
                    event.deep_get("query", default="").endswith("kippo.eu"),
                    event.deep_get("query", default="").endswith("hashinvest.ws"),
                    event.deep_get("query", default="").endswith("monero.farm"),
                    event.deep_get("query", default="").endswith("linux-repository-updates.com"),
                    event.deep_get("query", default="").endswith("1gh.com"),
                    event.deep_get("query", default="").endswith("dwarfpool.com"),
                    event.deep_get("query", default="").endswith("hash-to-coins.com"),
                    event.deep_get("query", default="").endswith("pool-proxy.com"),
                    event.deep_get("query", default="").endswith("hashfor.cash"),
                    event.deep_get("query", default="").endswith("fairpool.cloud"),
                    event.deep_get("query", default="").endswith("litecoinpool.org"),
                    event.deep_get("query", default="").endswith("mineshaft.ml"),
                    event.deep_get("query", default="").endswith("abcxyz.stream"),
                    event.deep_get("query", default="").endswith("moneropool.ru"),
                    event.deep_get("query", default="").endswith("cryptonotepool.org.uk"),
                    event.deep_get("query", default="").endswith("extremepool.org"),
                    event.deep_get("query", default="").endswith("extremehash.com"),
                    event.deep_get("query", default="").endswith("hashinvest.net"),
                    event.deep_get("query", default="").endswith("unipool.pro"),
                    event.deep_get("query", default="").endswith("crypto-pools.org"),
                    event.deep_get("query", default="").endswith("monero.net"),
                    event.deep_get("query", default="").endswith("backup-pool.com"),
                    event.deep_get("query", default="").endswith("mooo.com"),
                    event.deep_get("query", default="").endswith("freeyy.me"),
                    event.deep_get("query", default="").endswith("cryptonight.net"),
                    event.deep_get("query", default="").endswith("shscrypto.net"),
                ]
            ),
            not any(
                [
                    event.deep_get("answers", default="") in ["127.0.0.1", "0.0.0.0"],
                    event.deep_get("rejected", default="") == "true",
                ]
            ),
        ]
    ):
        return True
    return False
