firstcitizens.com

.com crawl dns

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 3316 ms crawled 2026-05-19

SE · 2.21.240.19 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title
Personal Banking, Credit Cards & Loans | First Citizens Bank
Description
Bank with First Citizens, a family-led bank focused on long-term relationships, offering checking, savings, credit cards, loans, mortgages and investing.
Language
en
Canonical
https://www.firstcitizens.com

Open Graph

url
https://www.firstcitizens.com/personal

Technology

CDN
Akamai
Cookie consent
  • OneTrust

Third-party hosts loaded (5)

  • assets.adobedtm.com×3
  • cdn.cookielaw.org×3
  • cds-sdkcfg.onlineaccess1.com×3
  • acrobatservices.adobe.com×1
  • www.fdic.gov×1

Social

Contact

Address
4300 Six Forks Road, 27609, Raleigh, NC, USA

Registration

Registrar
SafeNames Ltd.
Created
1995-07-28
Expires
2027-07-27 433 days left
Updated
2025-07-31
Name servers
  • ns01.firstcitizens.com
  • ns01.nsfcb.com
  • ns02.firstcitizens.com
  • ns02.nsfcb.com
  • ns03.firstcitizens.com
  • ns03.nsfcb.com

DNS records live

NS
  • ns01.firstcitizens.com
  • ns01.nsfcb.com
  • ns02.firstcitizens.com
  • ns02.nsfcb.com
  • ns03.firstcitizens.com
  • ns03.nsfcb.com
MX
  • 10 mxa-00176601.gslb.pphosted.com
  • 10 mxb-00176601.gslb.pphosted.com
TXT
Show 35 TXT records
  • box-domain-verification=4a0c81af8743e2281bbda4a481ca0fb2687d39ef5a1956ce829c0ea861ba1818
  • facebook-domain-verification=ouictd2s32l68mvnosbillq8blzooo
  • _kpdkv21n973abukx8mtgwic1haj92cg
  • google-site-verification=F4u9zLDNVxLyje6asfdVEYRVruRoPegG155gKVBy0EM
  • google-site-verification=C2Kcd9bMPdXup5mzD-aqWPrQ6S-AGMskhCk9BryKyqE
  • onetrust-domain-verification=991a31ae53f34f5aac68db51cfa7cdba
  • safebreach-domain-verification=5b7dbf5b-23db-41f4-8a01-598afff5f5e4
  • cisco-ci-domain-verification=32c8513095b6e784f98f1d374e60918d772a94f4e9b999b1b38637ab556e454d
  • amazonses:YePjqnS3TVrclyzFQeo/qYx4ewskoLt3oJsPj3susZ8=
  • docusign=e775bcba-d2d8-4d24-8edc-c57b648fa3e5
  • google-site-verification=MSn18VJ4lZWARrCwpFT8CAYhofGx-ZiKi2jtawi_r8A
  • atlassian-domain-verification=mXKucVDecUfNAfXWQI3k6znNSuvhmEBaIYqEeRn/cS09GryfV6b0ubFkPQC0dvgf
  • apple-domain-verification=xKnl6PjZ5Usb9Sxo
  • 96523149-6a13-4eff-9d19-2615bc93a9ac
  • onetrust-domain-verification=da1cd8bce760402fad35116040392a06
  • globalsign-domain-verification=22E4892E77C16D5C0E5EF2E560B25E60
  • adobe-idp-site-verification=aa3b16b7b144f025521a47fbf510e22196792fb981d817b2aa5fa17d23926512
  • cisco-ci-domain-verification=5e3cf912c9235172d4a934fbb93eab8d4f4e4d45805dfd4d9fb4e9ebc191ac7b
  • _c0iu8d29sznj62t4lz8fyiy4c7ob3im
  • zwnq44f6mjwjdvjspkjznp0934y61m3m
  • google-site-verification=OUmAOmafsOwkTFxDGWwqjJNrEYnFZdNEezficZxQGv0
  • Dynatrace-site-verification=07b0ad18-925e-44fb-b328-083197b9311e__t1cvhn8b567qgi80hd8c9rs4k9
  • _u120d89ggkxf5cwnl2n9gohsictmjnm
  • MS=ms98642387
  • hcp-domain-verification=2f60a7da47495ae29302a31ab5cd1aef36b9fbbb0c86cd7d5e68bfd741cd86f8
  • Us86KWU73NLwoqt8bEQyVwtXzv7M+h+EbCQbuM0zKf+CtDHzzQLF4VNGCquplIY9i38W9o0fIA0CAqURBW7YIQ==
  • otwCRRi3d+YH76r0KqMXtjZkG9uB8YNRMczFhFFaFa+rer5qxePD1tBiKmXYPYJ98uV1FRyv6P8YbIGeVdJf+A==
  • docusign=8ef14dfb-0ad1-4814-93fa-38ffbb5351dd
  • hz08fv3zjf0ww614d11q996n497y43k6
  • qjkj5ttmxqq6ngr945cx7mn76n2t589w
  • miro-verification=f0068887f74bc058ccafdb285733fffd74b47179
  • google-site-verification=Hzxyo6rmxn25OvLPaO2F6NEpggb-Zi99qWnxUzWW1DU
  • s4yhh2vf6j8gnymrqgmjrqwq2vv0tpwn
  • ZOOM_verify_weUnK2dzIuqzJL2It3Q9WR
  • intersight=5f7e5177a3a6034d7e2fae922508e49bb3c6c134aa3a8e71f36329212dd3113d

Email authentication strong

SPF
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;
policy: reject (enforced)
DKIM
Show 5 DKIM selectors
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXyyJgd4Fx/TEuwzGUn5IueNjXMCS9WE4Hko9GNmE6sRMoog+RIzBzyMtGZYgxb+FKsRD05q8+WyMw…
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClxvhqHzNBpn5ZFueRKUPEgINKLRgPiRv0csLZu4EXORn8uCFbgg0cvDTWR99zTGNo888I6y8D3CXTQF9j6Y…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZaCQfBj5wrif9Q9W7l9VrJ/yNn87hDD8Ejo0ESK3vc4xW+tpjj7UfdiVCrOm+nLQsfbKTGniiWjSCb9R7…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QguA53H3uMAN2NKp5+kuF29as8VfW8e8iNTV5A4xLqDmspUcGKhVX8UzusO2ORzfCy/FLTIR/FiEVfrU9…
  • smtpapi: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwf…
selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1
from 2026-01-21 to 2027-01-21
Expires in 246 days

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.firstcitizens.com/

present
  • strict-transport-security
  • content-security-policy
  • content-security-policy-report-only
  • x-frame-options
  • x-content-type-options
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' *.firstcitizens.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.firstcitizens.com cdn.cookielaw.org assets.adobedtm.com https://acrobatservices.adobe.com cds-sdkcfg.onlineaccess1.com www.googletagmanager.com s.go-mpulse.net *.onetrust.com connect.facebook.net bat.bing.com snap.licdn.com js-cdn.dynatrace.com googleads.g.doubleclick.net td.doubleclick.net www.googleadservices.com px.ads.linkedin.com edge.adobedc.net www.facebook.com px4.ads.linkedin.com siteimproveanalytics.com www.clarity.ms www.google.com google.com 2884.global.siteimproveanalytics.io c.go-mpulse.net zndhwk2nlgcbvdel3-firstcitizensbank.siteintercept.qualtrics.com t.contentsquare.net munchkin.marketo.net siteintercept.qualtrics.com 296-cpx-295.mktoresp.com 894-itd-344.mktoresp.com 284-lbb-572.mktoresp.com 151-fhs-046.mktoresp.com 412-tmw-562.mktoresp.com u.clarity.ms c.contentsquare.net 173bf10e.akstat.io k-aus1.contentsquare.net trial-eum-clientnsv4-s.akamaihd.net eyaqbbekafz5a
strict-transport-security
max-age=31536000; includeSubDomains
content-security-policy-report-only
default-src 'self' https://*.firstcitizens.com; script-src 'self' https://*.firstcitizens.com https://cdn.cookielaw.org https://assets.adobedtm.com https://acrobatservices.adobe.com https://cds-sdkcfg.onlineaccess1.com https://www.googletagmanager.com https://s.go-mpulse.net https://connect.facebook.net https://bat.bing.com https://snap.licdn.com https://js-cdn.dynatrace.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://edge.adobedc.net https://www.facebook.com https://px4.ads.linkedin.com https://siteimproveanalytics.com https://www.clarity.ms https://www.google.com https://google.com https://2884.global.siteimproveanalytics.io https://c.go-mpulse.net https://zndhwk2nlgcbvdel3-firstcitizensbank.siteintercept.qualtrics.com https://t.contentsquare.net https://munchkin.marketo.net https://siteintercept.qualtrics.com https://296-cpx-295.mktoresp.com https://894-itd-344.mktoresp.com https:

Links to (24)

Linked from (12)