Skip to content

Add shared credentials for ICICI Bank (icicibank.com → icici.bank.in) - #1240

Closed
mangeshraut712 wants to merge 1 commit into
apple:mainfrom
mangeshraut712:mangeshraut712/feat/icici-bank-shared-credentials
Closed

mangeshraut712 wants to merge 1 commit into
apple:mainfrom
mangeshraut712:mangeshraut712/feat/icici-bank-shared-credentials

Conversation

@mangeshraut712

Copy link
Copy Markdown

Summary

ICICI Bank moved its public site and retail Net Banking login from icicibank.com to icici.bank.in. This PR adds a from/to shared-credentials group so passwords saved for icicibank.com autofill on icici.bank.in.

No password-rules entry: the live login SPA and the Net Banking marketing page do not publish length/charset requirements (password generation is OTP + debit-card Grid Card Authentication). I did not invent a rule.

HDFC was merged separately in #1239; this PR is ICICI only.

Live evidence (2026-09-02)

Marketing site

  • https://www.icicibank.com/ → 301 https://www.icici.bank.in/ (200).
  • https://icici.bank.in/ → 301 https://www.icici.bank.in/.

Primary Net Banking login

  • Official Net Banking page (https://www.icici.bank.in/personal-banking/ways-to-bank/net-banking) and homepage CTAs use https://retailnetbanking.icici.bank.in/login-page (200, title ICICI Bank - Login to Net Banking).
  • Canonical Infinity URL still advertised in older flows:
    https://infinity.icicibank.com/corp/AuthenticationController?FORMSGROUP_ID__=AuthenticationFG&__START_TRAN_FLAG__=Y&FG_BUTTONS__=LOAD&ACTION.LOAD=Y&AuthenticationFG.LOGIN_FLAG=1&BANK_ID=ICI
    → 301 https://retailnetbanking.icici.bank.in/login-page?... (same SPA).

That is CONTRIBUTING’s from/to case. fromDomainsAreObsoleted is true because those login URLs no longer serve the form on icicibank.com.

Note: some older Infinity query variants (__CALL_MODE__=10 / 91, “get User ID” / generate-password helpers) still return 200 on infinity.icicibank.com. The advertised login itself redirects.

www.icici.bank.in CSP frame-src still lists infinity.icicibank.com, and frame-ancestors lists retailnetbanking.icici.bank.in — same bank, new retail host.

Overall Checklist

for shared-credentials.json

  • There's evidence the domains are currently related (live 301s, official Net Banking CTAs, CSP)
  • If using from and to, the from domain(s) redirect to the to domain to log in.

www.icicibank.com redirects to www.icici.bank.in, and the Infinity
Net Banking login URL 301s to retailnetbanking.icici.bank.in. Treat
icicibank.com as obsoleted in favor of icici.bank.in so saved
passwords continue to match the live login.

Signed-off-by: Mangesh Raut <mbr63@drexel.edu>
@rmondello

Copy link
Copy Markdown
Contributor

@mangeshraut712 Did icicibank.com previously host a login form? Our project's goal is not to document every redirect on the web, but to help users use passwords saved for an old domain on a new one.

@mangeshraut712

This comment was marked as low quality.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants