There is no server associated with the standalone version of this tool, all state stays on your device. Here’s a comprehensive list of URLs that the tool accesses (all these URLs are accessed over a secure (HTTPS) connection):
https://thorium.disruptorbeam.com/
https://stt.disruptorbeam.com/
https://ptpb.pw
https://www.facebook.com/v2.8/dialog/oauth
https://datacore.app/
The tool never stores your username or password and it only sends it to the game’s official servers for login purposes. If you check the “Stay logged in” checkbox in the login dialog, the tool will store an access_token on your local device in the IndexedDB database.
There is also an experimental web version of the tool that requires a server to proxy requests to the official game servers to avoid CORS restrictions. See the /server
branch in the repository. If you get it working or want to improve the web client, server, or documentation, contributions are welcome.