citi1-login.com Threat Intelligence and Information
Jul 17, 2022
domainpage
Host Location
Dig Results
- Got answer:
- -»HEADER«- opcode: QUERY, status: NOERROR, id: 8412
- flags: qr rd ra QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
- OPT PSEUDOSECTION:
- EDNS: version: 0, flags: udp: 1232
- QUESTION SECTION:
- citi1-login.com. IN A
- ANSWER SECTION:
- citi1-login.com. 299 IN A 172.67.179.163
- citi1-login.com. 299 IN A 104.21.18.22
- Query time: 84 msec
- SERVER: 192.168.1.153(192.168.1.1)
- WHEN: Sun Jul 17 13:32:44 UTC 2022
- MSG SIZE rcvd: 76
DNS Records
- SOA joyce.ns.cloudflare.com 108.162.194.14
- SOA joyce.ns.cloudflare.com 162.159.38.14
- SOA joyce.ns.cloudflare.com 172.64.34.14
- NS joyce.ns.cloudflare.com 172.64.34.14
- NS joyce.ns.cloudflare.com 108.162.194.14
- NS joyce.ns.cloudflare.com 162.159.38.14
- NS joyce.ns.cloudflare.com 2606:4700:50::a29f:260e
- NS joyce.ns.cloudflare.com 2803:f800:50::6ca2:c20e
- NS joyce.ns.cloudflare.com 2a06:98c1:50::ac40:220e
- NS pranab.ns.cloudflare.com 108.162.195.199
- NS pranab.ns.cloudflare.com 162.159.44.199
- NS pranab.ns.cloudflare.com 172.64.35.199
- NS pranab.ns.cloudflare.com 2606:4700:58::a29f:2cc7
- NS pranab.ns.cloudflare.com 2803:f800:50::6ca2:c3c7
- NS pranab.ns.cloudflare.com 2a06:98c1:50::ac40:23c7
- A citi1-login.com 172.67.179.163
- A citi1-login.com 104.21.18.22
- AAAA citi1-login.com 2606:4700:3032::ac43:b3a3
- AAAA citi1-login.com 2606:4700:3037::6815:1216
Whois Data
- Domain Name: CITI1-LOGIN.COM
- Registry Domain ID: 2710745248_DOMAIN_COM-VRSN
- Registrar URL: http://www.ownregistrar.com
- Updated Date: 2022-07-13T17:13:55Z
- Creation Date: 2022-07-13T17:13:55Z
- Registry Expiry Date: 2023-07-13T17:13:55Z
- Registrar: OwnRegistrar, Inc.
- Registrar IANA ID: 1250
- Registrar Abuse Contact Email:
- Registrar Abuse Contact Phone:
- Name Server: JOYCE.NS.CLOUDFLARE.COM
- Name Server: PRANAB.NS.CLOUDFLARE.COM
- DNSSEC: unsigned
- Domain Name: Citi1-login.com
- Registry Domain ID: 1222715
- Registrar URL: http://www.ownregistrar.com
- Updated Date: 2022-07-14T00:00:00Z
- Creation Date:2022-07-14T00:00:00Z
- Registrar Registration Expiration Date: 2023-07-14T00:00:00Z
- Registrar: OwnRegistrar, Inc.
- Registrar IANA ID: 1250
- Registrar Abuse Contact Email: abuse@ownregistrar.com
- Registrar Abuse Contact Phone:+91.2261426042
- Reseller: Hostior
- Registry Registrant ID: OR_1396
- Registrant Name: WhoisSecure
- Registrant Organization: WhoisSecure
- Registrant Street: 18 San Carlos Street
- Registrant City: Los Angeles
- Registrant State/Province: California
- Registrant Postal Code: 94110
- Registrant Country: United States
- Registrant Phone:+1.6144481974
- Registrant Phone Ext: 1
- Registrant Fax:
- Registrant Fax Ext:
- Registry Admin ID: OR_1396
- Admin Name: WhoisSecure
- Admin Organization: WhoisSecure
- Admin Street: 18 San Carlos Street
- Admin City: Los Angeles
- Admin State/Province: California
- Admin Postal Code: 94110
- Admin Country: United States
- Admin Phone:+1-6144481974
- Admin Phone Ext: 1
- Admin Fax:
- Admin Fax Ext:
- Registry Tech ID: OR_1396
- Tech Name: WhoisSecure
- Tech Organization: WhoisSecure
- Tech Street: 18 San Carlos Street
- Tech City: Los Angeles
- Tech State/Province: California
- Tech Postal Code: 94110
- Tech Country: United States
- Tech Phone:+1-6144481974
- Tech Phone Ext: 1
- Tech Fax:
- Tech Fax Ext:
- Name Server: joyce.ns.cloudflare.com
- Name Server: pranab.ns.cloudflare.com
- Name Server:
- Name Server:
- DNSSEC: Unsigned
SSL Certificate Information
- Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- e0:9c:ee:4b:08:ee:ac:9c:13:6a:50:38:c5:86:0b:30
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
- Validity
- Not Before: Jul 13 16:18:09 2022 GMT
- Not After : Oct 11 16:18:08 2022 GMT
- Subject: CN = *.citi1-login.com
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- RSA Public-Key: (2048 bit)
- Modulus:
- 00:bc:2b:5a:cd:04:55:df:e8:3f:20:f0:e6:bf:63:
- eb:7e:a3:e1:a8:ea:93:e9:48:b2:e2:ca:e6:19:e5:
- c5:45:9c:10:cb:04:a2:09:e2:2d:60:69:46:47:17:
- f8:7d:55:f7:83:71:77:a4:b6:7a:a8:a2:7a:81:bf:
- 7d:b6:fa:a7:a8:30:a2:99:73:bf:10:29:e8:47:50:
- 52:13:ee:75:05:3d:56:fc:8a:5b:94:e5:0c:c6:51:
- 61:87:7b:c9:fa:2d:d2:aa:e1:a8:b1:1e:21:5b:fa:
- fc:ed:86:38:1c:28:30:19:b6:3f:16:ca:9a:c2:a7:
- f3:17:a1:65:2a:68:26:ae:15:33:02:28:e5:76:f0:
- ee:0a:6b:c8:b1:a2:97:d8:24:44:cf:ad:92:39:17:
- 6a:78:60:68:e3:f1:df:a7:8b:0b:0e:df:19:81:fb:
- 62:84:b9:20:e4:1e:71:61:40:3d:ea:51:6f:26:9c:
- d6:fa:84:a9:59:73:c5:aa:6c:75:ab:6f:bb:cc:c3:
- 4b:6a:7b:15:a7:f6:91:76:d2:fe:44:da:29:b9:d2:
- ca:ab:da:5d:bf:5b:de:66:5f:71:07:b2:5d:5e:92:
- 4c:dd:d2:cc:87:d7:be:a0:1d:d4:48:c1:01:b6:dd:
- f3:7d:ed:d1:63:a3:1e:c3:68:de:14:46:10:47:d2:
- 5d:69
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication
- X509v3 Basic Constraints: critical
- CA:FALSE
- X509v3 Subject Key Identifier:
- 9C:8C:F4:21:0F:EA:C9:6F:35:77:5B:E1:2B:B0:AA:CE:85:15:0C:93
- X509v3 Authority Key Identifier:
- keyid:D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
- Authority Information Access:
- OCSP - URI:http://ocsp.pki.goog/s/gts1p5/9ifggasMPG0
- CA Issuers - URI:http://pki.goog/repo/certs/gts1p5.der
- X509v3 Subject Alternative Name:
- DNS:*.citi1-login.com, DNS:citi1-login.com
- X509v3 Certificate Policies:
- Policy: 2.23.140.1.2.1
- Policy: 1.3.6.1.4.1.11129.2.5.3
- X509v3 CRL Distribution Points:
- Full Name:
- URI:http://crls.pki.goog/gts1p5/utt2fHukd6E.crl
- CT Precertificate SCTs:
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 51:A3:B0:F5:FD:01:79:9C:56:6D:B8:37:78:8F:0C:A4:
- 7A:CC:1B:27:CB:F7:9E:88:42:9A:0D:FE:D4:8B:05:E5
- Timestamp : Jul 13 17:18:10.359 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:44:02:20:51:76:50:C2:84:9E:AD:09:8B:FC:E0:1C:
- B6:9F:E9:AE:99:8F:55:F8:A6:FC:A0:72:42:60:E2:71:
- 50:71:36:65:02:20:35:95:7E:72:14:22:81:EE:8E:53:
- FF:9D:94:A7:6E:82:2D:86:22:32:E2:65:1A:7B:0E:A0:
- 7D:33:A8:88:80:0D
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
- 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
- Timestamp : Jul 13 17:18:10.396 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:44:02:20:27:4A:8D:8D:73:A5:9E:C3:E8:04:34:B3:
- 2A:36:A2:A6:77:02:0D:31:2C:FB:79:A7:6D:BB:72:77:
- 59:73:D7:0E:02:20:32:8E:B6:54:03:16:EF:98:82:92:
- A1:32:1A:02:DF:87:E9:36:25:2A:4D:82:F9:3B:4B:D6:
- D3:42:57:CD:F2:03
- Signature Algorithm: sha256WithRSAEncryption
- 00:78:0b:11:2b:46:c5:38:9a:d6:c7:ce:3d:67:10:3f:2c:94:
- 15:67:c1:29:3f:17:1c:8a:fc:c7:45:31:e7:a3:fa:fc:4f:0f:
- 99:32:f7:71:ce:a5:98:bf:81:09:af:7b:29:85:88:c1:64:84:
- 62:83:c3:bd:fb:5c:36:1e:45:cf:5e:2e:ff:bb:51:1b:f2:42:
- 15:6c:41:7d:f5:e2:5c:3c:92:84:e5:e8:39:4f:69:50:f1:61:
- 5b:22:a4:29:0a:b6:41:73:5e:3e:78:9e:35:c8:cb:ad:b8:93:
- 24:67:4f:30:3c:a5:b6:a2:91:a5:56:22:08:af:70:fd:45:ce:
- 1a:5e:a7:2b:5c:c0:f5:54:2b:99:af:a3:1d:9d:e9:98:c3:dd:
- 3d:a9:1b:91:57:37:7c:d3:34:d1:40:e5:a6:f9:02:be:e9:43:
- 19:3d:80:b8:28:a7:d9:e1:2c:7e:32:37:35:00:fc:7f:06:ea:
- 3b:7f:1c:2d:fd:84:ef:1a:ed:e5:88:b2:9b:d5:ef:06:8d:d9:
- 58:eb:8a:ad:24:d7:b6:fe:e5:68:a0:46:d2:bb:51:56:10:59:
- 58:d3:43:91:09:28:d9:7b:27:67:3e:44:81:2d:9f:dd:5d:99:
- 8b:b3:a4:55:aa:45:b3:49:92:18:77:de:d8:c6:60:fc:fb:a4:
- d8:b4:63:88