Source: 0.0.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: https://marcuso-wq.github.io/home/... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. While the script appears to be related to a login page, the presence of these suspicious activities suggests a potentially malicious intent. Further investigation is warranted to determine the true purpose of this script. |
Source: 0.13.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscated nature of the code further increase the risk. While the script may be part of a legitimate challenge platform, the overall behavior is highly suspicious and indicative of a potential security threat. |
Source: 0.7.id.script.csv | Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d... This script demonstrates high-risk behavior by sending sensitive user data (email, password, and IP address) to a Telegram bot API, which is a clear case of data exfiltration. The use of the Telegram API to transmit this information to an untrusted third-party domain is a major security concern. Additionally, the script includes dynamic code execution by manipulating the DOM and rendering new HTML, which could potentially be used to execute malicious code. Overall, this script exhibits multiple high-risk indicators and should be considered a significant security threat. |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Invalid link: Your Privacy Choices |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Invalid link: Your Privacy Choices |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Invalid link: Your Privacy Choices |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Invalid link: Your Privacy Choices |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Invalid link: Your Privacy Choices |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/dest5.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/750067026.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/rul.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(3).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(4).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;npa=0;ps=1;pcor=1259885191;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://6187420.fls.doubleclick.net/activityi;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/750067026?random=1736448830628&cv=11&fst=1736448830628&fmt=3&bg=ffffff&guid=ON&async=1>m=45be4cc1v884915110za204&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20Your%20Account%20%7C%20Marcus%20by%20Goldman%20Sachs%C3%82%C2%AE&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/dest5.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/750067026.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/rul.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(3).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(4).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;npa=0;ps=1;pcor=1259885191;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://6187420.fls.doubleclick.net/activityi;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/750067026?random=1736448830628&cv=11&fst=1736448830628&fmt=3&bg=ffffff&guid=ON&async=1>m=45be4cc1v884915110za204&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20Your%20Account%20%7C%20Marcus%20by%20Goldman%20Sachs%C3%82%C2%AE&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/activityi(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/dest5.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/750067026.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(1).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/rul.html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(2).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(3).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://marcuso-wq.github.io/home/saved_resource(4).html |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;npa=0;ps=1;pcor=1259885191;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://6187420.fls.doubleclick.net/activityi;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6187420;type=aquis0;cat=marcu0;ord=1;num=6164833282122;npa=0;u1=undefined;u2=;u3=;ps=1;pcor=1342084645;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5170v9190952085za200zb884915110;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102198178;epver=2;~oref=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8? |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/750067026?random=1736448830628&cv=11&fst=1736448830628&fmt=3&bg=ffffff&guid=ON&async=1>m=45be4cc1v884915110za204&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=blob%3Ahttps%3A%2F%2Fmarcuso-wq.github.io%2F7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20Your%20Account%20%7C%20Marcus%20by%20Goldman%20Sachs%C3%82%C2%AE&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config |
Source: blob:https://marcuso-wq.github.io/7141b1f4-4894-4d9c-93a3-9b2d6f2a96c8 | HTTP Parser: Iframe src: https://v.marcus.com/fp/HP?session_id=mdfkndu2mzktodu5ns00nddiltlmzgutnzg4mwmzzwmzymq1fde3mzywotmyndq4ndy&org_id=nhs11h5x&nonce=151d2aea23a184b5&mode=2&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd= |