CONTINUOUS INTERNET TELEMETRY24H DRIFT3,316 material changesacross 3,062 domains · +2,407 vs yesterdayDNS DRIFT207 domains changed DNS providertop destination parity.domains · +181 vs yesterdayEMAIL DRIFT41 domains switched email providertop destination google.com · +33 vs yesterdayCERT DRIFT83 domains switched issuing CA24h · +60 vs yesterdayNOW2,301 curated domains not answering-409 vs yesterdayERRORS22,690 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED91,289 throttled or blocked our scanner429 rate-limit / 403 bot-block

citizensbank.com

Observed Jul 21, 2026, 19:13 UTC (11h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Guarded by a firewall
Runs onAkamai Technologies
Email byMicrosoft 365
Secured bySectigo
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleAtlassian
IPv6 · 3 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat citizensbank.com actually stands on - every host below is a signed observation
citizensbank.com
A / AAAA
104.68.241.1592600:1408:c400:138a::1f372600:1408:c400:1380::1f37
Akamai Technologiesserves the site
NS
a1-203.akam.neta13-64.akam.neta20-66.akam.neta18-65.akam.net+1 more
akam.netanswers its DNS
MX
citizensbank-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
www.citizensbank.com
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 104.68.241.159

AAAA 2

  • 2600:1408:c400:138a::1f37
  • 2600:1408:c400:1380::1f37

MX 1

  • 10citizensbank-com.mail.protection.outlook.com

TXT 23

  • google-site-verification=nB-dH36dKlMCOmilznloQMXVIuvyfZyHEWUFy_GZ4I4
  • smartsheet-site-validation=R6IFN1GzMMaLP1kyiuT51B6mOub1DVkJ
  • v=spf1 include:_cfgspf.citizensbank.com include:spf.protection.outlook.com -all
  • atlassian-domain-verification=0DHkQ/kHrdSAsQoLly7YEgz8v9KczaHPgu1mMHzkUCQJgXSUMWQe4gYk6Hd/gZP0
  • anthropic-domain-verification-bzq0h3=1oTLzuNoNueFJKQpGnqUn0UNS
  • pardot641533=e064e5f20408674804d4883f54fb63c654d161ec1c7c8d7136a86440717acae6
  • ciscocidomainverification=358b903e04681980724b9a9d5b5600741d70cb34b8aff357220fceb4c5b06b31
  • postman-domain-verification=332213a0d1d8e5a694aad56646287cedbf6a287905b919862fe0c2c0d76c8c2292e16f894b713fbf602236794231acb689682a7c83140959739eabeebc084f92
  • pardot1095902=5a2b2531a12e072803020b1bb1221c7ff762526dc63192668445054bfedd520c
  • onetrust-domain-verification=fc40aa7ca55743f9b37ce437e2f85bbe

NS 5

  • a1-203.akam.net
  • a13-64.akam.net
  • a20-66.akam.net
  • a18-65.akam.net
  • a22-67.akam.net

SOA 1

  • a1-203.akam.net domainrequests.citizensbank.com

SRV 4

  • cfg-iad-vcse01.citizensbank.com:5060 p10
  • cfg-lax-vcse01.citizensbank.com:5060 p10
  • cfg-lax-vcse01.citizensbank.com:5061 p10
  • cfg-iad-vcse01.citizensbank.com:5061 p10

CAA 5

  • issue "sectigo.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "ssl.com"
  • issue "pki.goog"

TLS Certificates (3)

Common NameIssuerExpires
www.citizensbank.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA EV R40 Thu, 29 Oct 2026 23:59:59 +0000
Sectigo Public Server Authentication CA EV R40 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Sun, 13 May 2040 23:59:59 +0000
Sectigo Public Server Authentication Root R46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citizensbank.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for citizensbank.com <a href="https://domaindrift.io/t/citizensbank.com"> <img src="https://domaindrift.io/badge/citizensbank.com.svg" width="300" height="64" alt="DomainDrift signed observations for citizensbank.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_717987a554463c75
Output Hash
6fea07ad02489fc3139c8edc7597374fa3f8b67cfdbd1facaffcda6defcea889
Signature
ed25519:5b58fdbd262428bd9bfc1d12d378e1190309abc9ea2f75455ce0feb71270fe4c2ad70036b8e98425b77ca286fbbc4eff0a199d6db1a0717e19dc274a9afb260d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser