Security Scan Report: www.globalmanagement.citidirect.com

Redirected to:
https://www.globalmanagement.citidirect.com/static/public-portal-ui/lo...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 37 HTTP transactions. The main domain is citidirect.com and was registered 28 years ago.

Submitted URL: https://www.globalmanagement.citidirect.com

Effective URL:
https://www.globalmanagement.citidirect.com/static/public-portal-ui/lo...
Redirected

The Cisco Umbrella rank of the primary domain is #50,497 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Official CitiManager sign-in on Citi's own long-established domain (citidirect.com). No impersonation, no Indicators of Compromise, no malware, and no credential exfiltration detected.

Safety Factors (5)
Official Citi-operated domain (citidirect.com) with matching brand
27-year-old well-established domain registration
Ranked in Cisco Umbrella top 100K
No credential exfiltration; form submits to the same origin
Legal/terms/privacy pages present, standard OneTrust cookie consent
Domain age information unavailable

Details

Page Title

Sign In to CitiManager - Expense Management

Scan Type

public

Domain Name Analysis

The domain 'www.globalmanagement.citidirect.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www.globalmanagement'. Its registrable label 'citidirect' stretches across 10 characters holding four vowels versus 6 consonants. Segmentation suggests 2 words: citi, direct. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.globalmanagement.citidirect.com

Page Load Overview

3.82s
Total Load Time
873 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,705 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business34% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
34%
technology software
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10216.119.218.188United States
AS26380MasterCard Technologies LLC
9104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.32.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
374--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T162017B065C04D84BE1651E8EECB1B84C48C6EA4ED225ECD85CD8527B55943C9DC8BE9D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hi+bJr53Fi7AD8xSAQIoESnUkxaZhb9UARzFLcARz+lRaj:hi+1r53EA5rE2UThhbpLc6iDaj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:712:AAEAAAAAAAAAAAAAABgAAAAAQgAAEAAAACAAAAAgAAgAAAABAAAAAAAEAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffee18242438dbe7
Perceptual Hash:f789dc8a7388dd20
Difference Hash:0848724848700a0e
Wavelet Hash:fffe18200018fee6
Color Hash:#6d3a78

Other Hashes

Crop Resistant:0848724848700a0e

Scan History

Scan history not available

Unable to load historical scan data