Security Report: citibank-online.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46b9b5f6-2c29-412e-9eaa-604ae6b95632 Domain and IP registration (RDAP)/api/v1/rdap/46b9b5f6-2c29-412e-9eaa-604ae6b95632 Certificate Transparency/api/v1/ct/citibank-online.vercel.app How often this domain was scanned/api/v1/domain/stats/citibank-online.vercel.app Scan history for this domain/api/v1/domain/history/citibank-online.vercel.app?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 24 HTTP transactions. The main domain is citibank-online.vercel.app and was registered 13 years ago.

Submitted URL: https://citibank-online.vercel.app/

Effective URL:

https://citibank-online.vercel.app/login

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Citibank sign-on hosted on a vercel.app subdomain, harvesting User ID and Password via a cloned Citi login page. Classic brand-impersonation credential phishing — do not enter credentials.

Risk Factors

Brand impersonation of Citibank on a non-official domain

Credential-harvesting login form (User ID + Password) presented as Citi's sign-on

Deceptive hostname combining the bank name with a free hosting subdomain

Unranked domain not in Cisco Umbrella top 1M despite claiming a top-tier financial brand

Domain age information unavailable

Details

Page Title

Sign On to your Citi Account - Citibank

Scan Type

public

Favicon Hash

MMH3: -2122867585

MD5: a6c54f808e079e839b3788e37b961770

Domain Name Analysis

The domain name 'citibank-online.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'citibank-online'. The core label 'vercel' covers 6 characters containing 2 vowels alongside four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.94s

Total Load Time

454 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,272 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking65% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

65%

government public service

32%

download file sharing

30%

documentation technical

27%

blog personal website

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	146.75.122.208Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
24	3	-	-