def rule(event):
    if any(
        [
            "msapp.workers.dev" in event.deep_get("QueryName", default=""),
            "trycloudflare.com" in event.deep_get("QueryName", default=""),
            "infinityfreeapp.com" in event.deep_get("QueryName", default=""),
            "my5353.com" in event.deep_get("QueryName", default=""),
            "reurl.cc" in event.deep_get("QueryName", default=""),
            "lihi.cc" in event.deep_get("QueryName", default=""),
            "tinyurl.com" in event.deep_get("QueryName", default=""),
        ]
    ):
        return True
    return False
