Security Scan Report: client.citizensbank.com

Redirected to:
https://commercial-sso.citizensbank.com/sso/uportal/login?app=butler&S...
Site favicon
Submitted: Aug 18, 2026, 8:57:39 AMCompleted: Aug 18, 2026, 8:58:47 AMpubliccompleted

Summary

This website contacted 44 IPs in 4 countries across 37 domains to perform 145 HTTP transactions. The main domain is commercial-sso.citizensbank.com and was registered NaN years ago.

Submitted URL: https://client.citizensbank.com

Effective URL: https://commercial-sso.citizensbank.com/sso/uportal/login?app=butler&SAMLRequest=fZNdc6IwFIb%2FCpN7EMGvMsUOoFatigoq9oYJGAGBBJJg1V%2B%2FbGu73d2ZnplzkZyT983JPHl8uuSZcEaUJQTroCnJQEA4JIcERzrYuCOxB576jwzmmVJoRsVjvEZlhRgX6oOYaR8VHVQUawSyhGkY5ohpPNQcYz7TFEnWCko4CUkGBIMxRHltZRHMqhxRB9FzEqLNeqaDmPOCaY1GmCUIcylMeHJDmAUQp1JI8kZGogQ%2FMaLL8kCV7%2BGNl0AY1PdJMOTvM3zJkLw2CBOYiYyR%2F%2BXqzUZVEMphdpeGRaEHFc8QBcJkoANfsYw6oJU6mwLPB8bbv1lXTTNSj3NfOcwWXb9XrPcLdWzN2cMI5q1dvHlzoZe37cjf42eneS1GxWWdxbPs0rNeFGhm%2B3nixQfqse50v2%2BTRZAur7Fcii%2Fdk2edTpOefz6MjYkfb6YvK37OLu3LZVo6fF0Nq2vqHO0V2biQqQrcjv3VGNJREL5OB8pRuR1TPEn3fPTssp2nmrZ9aG5vx%2FhqDSv15HXwsppzG0W4a3LPCLqq2RGHs1NQMprJLaXTtEtx%2BzxIF%2B4O%2B6%2BrRWu94%2BZtmijDh%2B0w7IwQDaJtyUorql%2BLsQpNMOMQcx0ostIR5Z7Y7LlyT2t3tVZTeugor0BY3kkwE%2FxB2E%2FYBB9NTBu77lJc2o4LhO0nqXUDuHOpvbvT70D%2BLAw%2FKQT9L1i%2B0SH%2BIUfKrxKDGWJHQkP0G5vHxnfP%2Fn3599fo%2FwI%3D&RelayState=%2Fs%2F&SigAlg=http:%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=FgllnSSNTQOhHLnhqGBT5LXG8ai3Bq6OoC5Zi8iqfzlXYvoQYvk2LRz3N2FuwrZ2kbwqSp%2FcZD2E9Nmg7M1HZqfXT8M0x0Q69vgbALjocP3ZvVwGyxKgx5b6Y38GFJquZ5irKaU%2FpRqqSDaLbc41rrC%2Fm401f7myu40bhIdhRjkzTiwXinnFyVDr%2F6hp80EVWl1oL1as7kulBYNTvMqiLC%2FWAZlPp12VlM08HLq8LI3cu69U9oWZbpbw8%2ByZNKwVgZVxqKtsZVyZQBTe0waIbqUK2IRlC%2Ba4U7MrehN5xIMoW1gIri2vC%2B6ALFfKKyTITBXQSiq4fxzJ2R9fJ%2BGCQg%3D%3DRedirected

The Cisco Umbrella rank of the primary domain is #37,489 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

The site appears to be a legitimate Citizens Bank login portal with no malicious indicators.

Safety Factors
Established domain with long registration history
Official banking brand on its own domain
Legitimate cross‑origin SSO endpoint
No malicious JavaScript or network activity detected
Domain age information unavailable

Details

Page Title

Commercial Unified Portal

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the commercial generic top-level domain (.com), 'client.citizensbank.com' is registered with subdomain 'client'. Its registrable label 'citizensbank' stretches across 12 characters containing 4 vowels alongside eight consonants. It segments into two words: citizens, bank. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of 02179918.akstat.io

Page Load Overview

6.92s
Total Load Time
145
HTTP Requests
37
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,653 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1623.58.104.199Düsseldorf, North Rhine-Westphalia, Germany
AS16625Akamai Technologies, Inc.
3176.34.106.56Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
363.140.62.139United States
AS16509Amazon.com, Inc.
335.244.159.8Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.155Google · CDNUnited States
AS15169Google LLC
3104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.90.181.163Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
318.66.122.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
363.140.62.172United States
AS16509Amazon.com, Inc.
14544--

Page Statistics

145
Requests
37
Unique Domains
2.8 MB
Total Size

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3F2A2768708257B1BD3BDC4B0E53F0B3172C96AE80F49ECB9AC55A81FC5FA2C481695

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1DoUeeeJu19rs0IZYMI7mI/9tteQHhD8MkWgjeYf:KUeeeE/IjI6IIEhDzAjeYf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36767:Mh4QGrQ60MBISUoxUgUkyABZTsIA4BRRU9EfhCxAAO4qQSRYIBZXUEIRhUILpsIl7AEKzNDAkFC4ADZocaCBMFIAQCQaStCR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8f81a7e7afbfdfbf
Perceptual Hash:b333cc8cb333878c
Difference Hash:7b374a4a4e6e3970
Wavelet Hash:818182a686ae9fbf
Color Hash:#a1d22d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data