Hi Lene,
assuming the regexp is right, there are encoded chars inside, so uncheck "decode url" in the rule and it should work.

Best regards
Luigi

Sorry Lene,
I didn't understand the URL is exactly like you wrote. It is a regular expression and this confused me. Let's start again...

The URL you find in the log is:
/%5E[a-zA-Z0-9._-]+@[a-zA-Z0-9.-]+.[a-zA-Z]%7B2,6%7D$/

So this URL starts from the browser encoded as:
/%5E%5Ba-zA-Z0-9._-%5D+@%5Ba-zA-Z0-9.-%5D+.%5Ba-zA-Z%5D%7B2,6%7D$/

You can create a rule to match it as is (decode to false), but you need to escape some special chars, so:

I have dropped the last / so it will match if this is present or not. I have not tested it, so tell me if still doesn't work.

Kind regards,
Luigi

As you wish,
but if you want to fix it, we can schedule a remote support session and I can help with this.

Kind regards,
Luigi