I have a rule set up which was working previously. The rule uses the attribute "Where from". In Terminal, I used 'mdls path/to/file' and found that the file in question has the attribute kMDItemWhereFroms. I don't see a Hazel attribute for the plural, but does that make a diff?