GrizzlyGrizzly
Recent phishing
Phishing

Impersonating Citi

Intent: Credential collection

  • Domain is not operated by Citi
  • DNS nameservers do not match Citi's known infrastructure
  • Domain was registered very recently
  • Domain not registered through Citi's usual registrar

Citi sign-on page for Citigroup Wealth Management client portal with user ID and password fields

Scanned 22 days ago · Sep 8, 2026, 15:23 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL