Security Scan Report: citi.youngcodelord.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 15 HTTP transactions. The main domain is youngcodelord.com and was registered 10 years ago.

Submitted URL: https://citi.youngcodelord.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Citi-branded phishing page on citi.youngcodelord.com harvesting User ID and Password, flagged by Google Safe Browsing for social engineering. Do not enter credentials.

Risk Factors (5)
Google Safe Browsing social engineering / phishing detection
Brand impersonation of Citi on a non-Citi domain (youngcodelord.com)
Password-collecting login form on an unrelated third-party host
Deceptive 'citi.' subdomain constructed to look like the official bank hostname
Unranked domain presenting itself as a major financial institution's online banking portal
Domain age information unavailable

Details

Page Title

Online Banking, Mortgages, Personal Loans, Investing | Citi.com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'citi.youngcodelord.com' is registered and includes subdomain 'citi'. The registrable portion 'youngcodelord' spans 13 characters split between 5 vowels and 8 consonants. It segments into three words: young, code, lord. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://citi.youngcodelord.com/

Page Load Overview

2.49s
Total Load Time
286 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,917 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
72%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3192.211.51.134Dallas, Texas, United States
AS29802HIVELOCITY, Inc.
3184.24.77.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3184.24.77.135Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3184.24.77.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3184.24.77.167Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
155--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10012D063D1C459FB0715CAC45926B338D84344EBCE86A582F7BC4ADDAB6DE63C81318E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ncWlwOefXdZtxhZI8+afThYzWMKEYzWswzWYskH7gzWwgyqZg:cWlCZ//lYzW5zWxzWYshWHyqZg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9652:BPwJsEi2RKDCAAsIWAgVSrAQuYCGTAhDSOLpAgOADwhKoGjCEMqAAfnQdABIFSAIJgSBgCJtFAjwE2iAKA5IhSA2ELAAOJRg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7c3f7ff8183ff
Perceptual Hash:b6c68918cd6766c3
Difference Hash:722c0f2e302b2b56
Wavelet Hash:f38781a7ff818183
Color Hash:#1f5293

Scan History

Scan history not available

Unable to load historical scan data