Report - en-citi.com/app/billing.php

Report Overview

Submitted URL
en-citi.com/app/billing.php
IP
209.17.116.160
ASN
#19871 NETWORK-SOLUTIONS-HOSTING
Submitted
2024-05-05 03:54:19
Access
public
Website Title
Citi Online
Final URL
en-citi.com/app/billing.php
Tags
citi financial phishing
urlquery detections
Phishing - Citi

Detections

urlquery
5
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
en-citi.com	unknown	unknown	No data	No data	19 kB	751 kB	209.17.116.160

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	en-citi.com/app/js/jquery.js	87 kB	2023-03-07	2024-05-17
Pretty URL en-citi.com/app/js/jquery.js IP 209.17.116.160 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:26 Last Seen2024-05-17 08:02:52 Times Seen12299 Hash af4078402c5e090d3f81d1abd71e2250 9592732de681f4365e9b7016dc5cf76e2a55ee9b 8603b20b548270423fb03c2138c16f5f863ead4c48eb0999167df869e2eef8a6 Loading...

	en-citi.com/app/js/jquery.mask.js	18 kB	2023-03-07	2024-05-18
Pretty URL en-citi.com/app/js/jquery.mask.js IP 209.17.116.160 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:19 Last Seen2024-05-18 08:09:41 Times Seen3708 Hash 219d169a80568884a3d6baab3e5e7def 61d00104de8c972c820cd9b527d8e2edb30e5c4a cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a Loading...

	en-citi.com/app/billing.php	66 B	2024-05-05	2024-05-05
Pretty URL en-citi.com/app/billing.php IP 209.17.116.160 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 05:54:25 Last Seen2024-05-05 05:55:49 Times Seen2 Hash fdbc85c7d75e6b6ea178f9ec5d5da58b e393fff83e5b83598b1019aabcc0ccb11a5b1011 19c92b9f60290c0037c44a53296be3bfe25c753620364eec1fbe283b5dec51cc Loading...

	en-citi.com/app/billing.php	85 B	2024-05-05	2024-05-05
Pretty URL en-citi.com/app/billing.php IP 209.17.116.160 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 05:54:25 Last Seen2024-05-05 05:55:49 Times Seen2 Hash ae332d55db961a966b33da2089b52b2b 119afc2e363ea727af062eb531397b59f058ef6f 720b400c19fe708b99a2b0633a60b3fdfe4a39a2a1de9bbc853225ff30f613a9 Loading...

HTTP Transactions (36)

URL IP Response Size

en-citi.com/app/files/citilogoredesign.png

209.17.116.160

200 OK

1.8 kB

URL GET HTTP/2
en-citi.com/app/files/citilogoredesign.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
PNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced
Size
1.8 kB (1799 bytes)
Hash
b8c9db53b866a0120618cd396e1513f1
5cfe9732c78e4eb7365681834cdd682b977a0232
102503acef6077fcf8e42a856fb4904fcd74224a32d5d8efcd13236ac6309fed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Citi

HTTP Headers

GET /app/files/citilogoredesign.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: image/png
content-length: 1799
last-modified: Sat, 04 May 2024 09:53:07 GMT
etag: "707-6179dcda18534"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

en-citi.com/app/files/style.css

209.17.116.160

200 OK

13 kB

URL GET HTTP/2
en-citi.com/app/files/style.css
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
13 kB (12635 bytes)
Hash
843d096bcea6a59c3dc6df03c121ecff
47cadeff5ad74ca7c0dd5a1c54cca1a078905570
d741d7cfc67b8dd8270949f8c09a0815a866f73cbcedca4b2f06c43ab4302789

HTTP Headers

GET /app/files/style.css HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 04 May 2024 10:03:28 GMT
etag: W/"e9d-6179df2a49a36"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

en-citi.com/app/files/1440_Citi-PLT@3x.png

209.17.116.160

200 OK

28 kB

URL GET HTTP/2
en-citi.com/app/files/1440_Citi-PLT@3x.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
PNG image data, 4320 x 279, 8-bit/color RGBA, non-interlaced
Size
28 kB (28149 bytes)
Hash
33567268701e83c3e827b6062cb0c062
d23224d7d4fd15617c84c976f979b259557b6fc6
6dfa343a68ef79e83fef5f7c705119d2473352190c609cf94c67ea99a29fa452

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Citi

HTTP Headers

GET /app/files/1440_Citi-PLT@3x.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: image/png
content-length: 28149
last-modified: Sat, 04 May 2024 09:52:44 GMT
etag: "6df5-6179dcc446e0b"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.validate.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.validate.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.validate.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.additional-methods.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.additional-methods.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.additional-methods.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/billing.php

209.17.116.160

200 OK

236 kB

URL User Request GET HTTP/2
en-citi.com/app/billing.php
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
236 kB (236261 bytes)
Hash
2d180b9197968a416a230f7bb1d2a0d1
ad39cb105dbf6f19706666512998a5c85893fca8
dec864aca4ae5f1b457e5222b05f99057941fe6ae2e7de7e5d459a56146e0d5f

HTTP Headers

GET /app/billing.php HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340; path=/
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

en-citi.com/app/files/chat_search_campaign.png

209.17.116.160

200 OK

54 kB

URL GET HTTP/2
en-citi.com/app/files/chat_search_campaign.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
PNG image data, 731 x 488, 8-bit/color RGBA, non-interlaced
Size
54 kB (54020 bytes)
Hash
07a2a0e553e9102f0e9694a6c66549d8
1cab382b8801136991a3c14b23e76ad2dec8ecfe
006403601c4a66fa432ff75a0ec2d6d64920b1202b286403545ef6cd401f0d64

HTTP Headers

GET /app/files/chat_search_campaign.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: image/png
content-length: 54020
last-modified: Sat, 04 May 2024 09:53:05 GMT
etag: "d304-6179dcd7d9db6"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.v-form.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.v-form.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.v-form.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/commonui-assets/images/progress-indicator-bg.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/commonui-assets/images/progress-indicator-bg.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/commonui-assets/images/progress-indicator-bg.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/citi-branding-assets/images/Appstore-Googleplay-JDPower-Sprite.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/citi-branding-assets/images/Appstore-Googleplay-JDPower-Sprite.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/citi-branding-assets/images/Appstore-Googleplay-JDPower-Sprite.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/citi-branding-assets/images/social-media_facebook@3x.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/citi-branding-assets/images/social-media_facebook@3x.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/citi-branding-assets/images/social-media_facebook@3x.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/citi-branding-assets/images/social-media_twitter@3x.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/citi-branding-assets/images/social-media_twitter@3x.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/citi-branding-assets/images/social-media_twitter@3x.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/citi-branding-assets/images/Citi-Branding-Sprite.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/citi-branding-assets/images/Citi-Branding-Sprite.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/citi-branding-assets/images/Citi-Branding-Sprite.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css

209.17.116.160

200 OK

203 kB

URL GET HTTP/2
en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
203 kB (203401 bytes)
Hash
b3aa80fa43820c334ac880b1cca85322
3a59771b626c419665a09094824b1b3461eb7610
cb2a8b2b7d27efcf86f4de795e3231a1374ed537ca0e8b770d020b34b374e885

HTTP Headers

GET /app/files/styles.e2fa5d8f7f949d87cdf2.css HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 04 May 2024 10:03:43 GMT
etag: W/"1347f8-6179df3870b11"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

en-citi.com/app/citi-branding-assets/images/social-media_youtube@3x.png

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/citi-branding-assets/images/social-media_youtube@3x.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/citi-branding-assets/images/social-media_youtube@3x.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/commonui-assets/fonts/interstate/Interstate-Bold.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/commonui-assets/fonts/interstate/Interstate-Bold.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /commonui-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.validate.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.validate.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.validate.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/commonui-assets/fonts/interstate/Interstate-Bold.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/commonui-assets/fonts/interstate/Interstate-Bold.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /commonui-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/commonui-assets/fonts/interstate/Interstate-Light.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/commonui-assets/fonts/interstate/Interstate-Light.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /commonui-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.additional-methods.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.additional-methods.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.additional-methods.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Bold.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Bold.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/cds-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Light.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Light.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/commonui-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Light.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Light.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/cds-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.v-form.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.v-form.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.v-form.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Light.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Light.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/commonui-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Light.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Light.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/cds-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Bold.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/cds-assets/fonts/interstate/Interstate-Bold.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/cds-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.CardValidator.js

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/js/jquery.CardValidator.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/js/jquery.CardValidator.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Bold.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Bold.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/commonui-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:57 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/favicon.ico

209.17.116.160

200 OK

8.7 kB

URL GET HTTP/2
en-citi.com/app/files/favicon.ico
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
PNG image data, 367 x 367, 8-bit/color RGBA, non-interlaced
Size
8.7 kB (8747 bytes)
Hash
5c529d13403aaef133f480514b0d7b3f
73b6a54f396770a92bd13f0af7b0530e7a68b546
2f6d73a312361b30f573d8f97bf9b345f2316c3d8b40723592b3145e360f8c32

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Citi

HTTP Headers

GET /app/files/favicon.ico HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:57 GMT
content-type: image/x-icon
content-length: 8747
last-modified: Sat, 04 May 2024 10:02:28 GMT
etag: "222b-6179def10a9a1"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Bold.ttf

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/app/files/commonui-assets/fonts/interstate/Interstate-Bold.ttf
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text
Size
575 B (575 bytes)
Hash
4546cec9cc9f33afaa19f1e81c7278fb
1b389a6d4d910de0f991a27487f1e1cd8b1223df
54998b618c0740e80bd07e3b28870fd68ce831df08dc73a8e3e3a261efdfb720

HTTP Headers

GET /app/files/commonui-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/files/styles.e2fa5d8f7f949d87cdf2.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:57 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/320_Citi-PLT@3x.png

209.17.116.160

200 OK

12 kB

URL GET HTTP/2
en-citi.com/app/files/320_Citi-PLT@3x.png
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
PNG image data, 960 x 279, 8-bit/color RGBA, non-interlaced
Size
12 kB (11562 bytes)
Hash
7c1b9c0c6762e2405c3fea9847a1d422
441fd252e12934bfb00554eae96f091d2764bf32
f378974fe6a831ae2f48d9191ea74eb21877d4964d5eedbc2810d8756ed13631

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Citi

HTTP Headers

GET /app/files/320_Citi-PLT@3x.png HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: image/png
content-length: 11562
last-modified: Sat, 04 May 2024 09:52:52 GMT
etag: "2d2a-6179dccb82318"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
accept-ranges: bytes
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.mask.js

209.17.116.160

200 OK

18 kB

URL GET HTTP/2
en-citi.com/app/js/jquery.mask.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
18 kB (18430 bytes)
Hash
219d169a80568884a3d6baab3e5e7def
61d00104de8c972c820cd9b527d8e2edb30e5c4a
cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a

HTTP Headers

GET /app/js/jquery.mask.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 04 May 2024 10:04:15 GMT
etag: W/"47fe-6179df56b24f0"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

en-citi.com/commonui-assets/fonts/interstate/Interstate-Light.woff

209.17.116.160

404 Not Found

575 B

URL GET HTTP/2
en-citi.com/commonui-assets/fonts/interstate/Interstate-Light.woff
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (597), with no line terminators
Size
575 B (575 bytes)
Hash
4393551ee0ef58cd251b72ae03c66ed8
b3337a75d895e93fbbe19450083f1ff6158a54bd
dc56c395155ed796169b3dfb004052844b0581945415f72e04a45fb52f350a6f

HTTP Headers

GET /commonui-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:56 GMT
content-type: text/html
content-length: 575
last-modified: Wed, 05 Oct 2011 15:41:30 GMT
etag: "23f-4ae8f0ab47e80"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2

en-citi.com/app/files/all.min.css

209.17.116.160

200 OK

59 kB

URL GET HTTP/2
en-citi.com/app/files/all.min.css
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (58749)
Size
59 kB (58935 bytes)
Hash
84d8ad2b4fcdc0f0c58247e778133b3a
6f33eae92d42fe209167139940a0ad6a3c6c167e
14cbd9b866a9b092e3a2e03a93b128da5baca005fd8b44a1956146eaab7b48b7

HTTP Headers

GET /app/files/all.min.css HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 04 May 2024 09:52:56 GMT
etag: W/"e637-6179dccf67842"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

en-citi.com/app/js/jquery.js

209.17.116.160

200 OK

87 kB

URL GET HTTP/2
en-citi.com/app/js/jquery.js
IP
209.17.116.160:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://en-citi.com/app/billing.php
Certificate
IssuerSectigo Limited
Subjecten-citi.com
FingerprintDE:A4:2B:9C:CC:DA:2E:17:8E:69:03:FA:9D:2A:65:CA:AA:A6:05:05
ValidityMon, 29 Apr 2024 00:00:00 GMT - Tue, 29 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
87 kB (86841 bytes)
Hash
af4078402c5e090d3f81d1abd71e2250
9592732de681f4365e9b7016dc5cf76e2a55ee9b
8603b20b548270423fb03c2138c16f5f863ead4c48eb0999167df869e2eef8a6

HTTP Headers

GET /app/js/jquery.js HTTP/1.1
Host: en-citi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en-citi.com/app/billing.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b8492dffa5178a9385cdfd555a1ba340
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.25.3.1
date: Sun, 05 May 2024 03:53:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 04 May 2024 10:03:58 GMT
etag: W/"15339-6179df46f82b5"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: "1; mode=block"
referrer-policy: no-referrer-when-downgrade
x-webcom-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (36)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type