Bulletproof Redirect Engine via Cloud Platform Redirect Hops (BRE)
Detects web traffic containing HTTP 301/302 redirects to known cloud hosting platforms (Azure, AWS, Cloudflare) that exhibit suspicious URL patterns or originate from identified malicious referrers associated with phishing or credential harvesting campaigns.
Splunk (SPL)

