Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

Total

DNS

Email

Security

Network

Availability

Domainciti.com

IPv42

IPv60

MX records2

StatusActive

Domain technical report

Credit Cards, Banking, Mortgage, Personal Loans | Citi.com

citi.com

Generated: 2026-08-09T09:32:57-05:00 · Cached result

JSON CSV PDF Visit site

IPv42

IPv60

MX2

NS2

DiagnosticsMain findings and recommendations

✓

IPv4 (A)30 / 30 pts · Dns

2 IPv4 address(es) detected.

IPv6 (AAAA)0 / 10 pts · Dns

0 IPv6 address(es) detected.

✓

Name server redundancy20 / 20 pts · Dns

2 NS record(s); 2 or more required.

✓

SOA record10 / 10 pts · Dns

Authoritative zone record.

DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

✓

CAA policy5 / 5 pts · Dns

Certificate authority restriction.

✓

DNS propagation10 / 10 pts · Dns

Agreement between public resolvers.

✓

MX records20 / 20 pts · Mail

2 MX record(s).

✓

SPF25 / 25 pts · Mail

SPF policy published.

✓

DMARC25 / 25 pts · Mail

DMARC policy published.

✓

DKIM20 / 20 pts · Mail

A DKIM selector was verified.

MTA-STS0 / 5 pts · Mail

Mail transport policy.

TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

✓

Valid TLS certificate55 / 55 pts · Security

60 day(s) remaining.

✓

Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

HTTP security headers0 / 35 pts · Security

0 of 9 evaluated headers detected.

✓

PTR reverse DNS30 / 30 pts · Network

PTR: a104-94-222-171.deploy.static.akamaitechnologies.com

✓

IPv4 diversity35 / 35 pts · Network

Two or more IPv4 addresses receive full points.

IPv6 connectivity0 / 35 pts · Network

AAAA availability.

✓

DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

HTTP response0 / 40 pts · Availability

HTTP/2 403

✓

HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

2 record(s)

104.94.222.171
104.96.178.165

AAAA

0 record(s)

—

Not configured

CNAME

0 record(s)

—

Not configured

MX

2 record(s)

5 mx-a.mail.citi.com.
5 mx-b.mail.citi.com.

TXT

71 record(s)

"google-site-verification=L1Lza0R_TN5xEb2XGS0gdln_9_PF4ZHM2oEFt7eBbmk"
"00D46000000qPI1=1TBHp000000CaW2"
"onetrust-domain-verification=8b7a1488b545465695641e5270d8a99a"
"google-site-verification=_alZVDpHzfdLjopE_G2DD5X2AFTc2xTDI-obd8ClLUQ"
"google-site-verification=4pOkWNaEhsTtiGfIhhOndCNSE1IxQ_Q5p5btnvz7kmE"
"00DD50000001k6c=1TBD50000004CBx"
"google-site-verification=B_pijZlLyXVJyvsvF-TUmT5xVOCIRYNNGyWUwJtEPRI"
"paloaltonetworks-site-verification=24c5c8d65316a466a0398d4647ac0fd3841e48d123a167c5fb3f7a4bfa804c3b"
"00D0m0000004lAC=1TBDH0000008OJh"
"MS=F25161EAF7DFE0A8EB0D21EF61D73150B9ACA013"
"smartsheet-site-validation=dx3GuBw2S8kwH2vcNv1jkucYGDzKYpxj"
"00DKN0000000wqU=1TB9M0000000GJJ"
"fSarLWfHvz-OkpuBXER1jG4m1VujieZE"
"cisco-ci-domain-verification=5a62ef0e311ca152245c16d71c83813cf36ecc66759f859c1cbc36254f229da3"
"00D110000001C8Y=1TBDL0000000006"
"00DDY0000001EWv=1TBDY000000000G"
"dvv-domain-verification-23vVQws-AsKLYPy4gth-08082022"
"00D180000008oCA=1TBDj000000001T"
"00DKF0000006pEV=1TBKF0000004C93"
"00D2x000006MvFd=1TBJ8000000fxUM"
"00DKJ000000GyiG=1TB9M0000000GCr"
"00Df3000000QshM=1TBKc000000PAuE"
"google-site-verification=HRb-jLUc51dumC2UGUIX2983q-pft1sHvpG278r4uwQ"
"docusign=076ce8ae-452a-4c16-847c-32db89d823f8"
"google-site-verification=YQyb5sMGXi_t2m5-xmj5QUk5mmN2aaJHh54jaxwl-98"
"00DKK000000LGZQ=1TBKK0000008OJN"
"00D80000000PLQr=1TBHn000000blJT"
"jj22qh8ntcn3yzn39rrjjbgxfn06m20h"
"MS=ms96393155"
"h1-domain-verification=9nFbPdtdmG9jwLRaspS1irUMipUbbEvYyxLuo5osJi6UBVrq"
"00D80000000dJGS=1TBHn0000010wBf"
"onetrust-domain-verification=17bb620b2f7c4f418051e46561ad5e4f"
"OSV-165-cus"
"google-site-verification=ABOHtfSldFWY5P-YB5EV4rHl0vPqaRS9tw4n32s0o2I"
"00D41000000cA0F=1TBKc000000XZBA"
"google-site-verification=UMzNsdQe6IGomwg0M4PPkOyK49pGGvvnMwEs-42rnKE"
"00DHr000002fSao=1TBHr000000PAvr"
"postman-domain-verification=224f794c3469967a082e009153fdd083928eecf3d08eb1bfddcdceaa886671a6fe4e3968ea1bc819d42a7b2fa94fc90f4fad786b7ce93e01b2540a2dfd59b59b"
"docusign=5969b384-53d1-44ce-938d-e2e248c6141c"
"google-site-verification=FSCGqGR_zn6Jc3OQKDRhzrdT41arqC9XVq3WIIW1EmA"
"00DD30000001Yel=1TBD30000000010"
"mongodb-site-verification=1VyRLxujfBs32zYtjaXlKKrTNA0pNano"
"00DDM000003vKSd=1TBhO000000001d"
"00D2C000000Czue=1TBDv0000008OLi"
"00D1b00000094cq=1TBDk0000004CA6"
"google-site-verification=pmLiYw0AYWlCtorYwy1SI0q5NbpMV9KCOKzWkKF430k"
"gradle-verification=5J29OVBRKEIFHDE92DLD9FOBAPKUQ"
"00DL0000005xwXW=1TBDP000000GmbE"
"google-site-verification=Rxk5MSgm_QXddI9aciVVg56Wbcqh1yDmgKDfcNynYJM"
"adobe-idp-site-verification=00311517-b6a8-4b89-949e-aa5bf74369f6"
"uber-domain-verification=9b594e8c-eff4-453f-9531-d814467aecf7"
"liveramp-site-verification=JQ8FMzIH9G_vy9Dv2lEr4VvoljyMUfo16PnMrPrW_TM"
"00D0v00000012E9=1TBRu0000000cjd"
"webexdomainverification.4C675B8AC1BDB136E053AB06FC0A3F65=5ea1c9a6-553f-411b-8aee-8d00dc679f08"
"google-site-verification=2IMwQLcb69tRDccefBLNR2l0jhKKP_rNaxbl0DbSvxI"
"00D300000005om9=1TBKZ000000wkEU"
"google-site-verification=Q95TxRrdIcgUWKCjhHU_K0Icdwirq2Q72ZKMuFBLqPA"
"00DDz000001qseI=1TBgP0000000Agv"
"00D52000000JP2x=1TBDU0000004CAz"
"docker-verification=e3ac39b4-7e42-404d-993a-3c361b160a1f"
"00D0U0000009p3B=1TBDX000000000B"
"p8SVjdM7cxe_8urzyIqKS6ez"
"IACkgxvi6HHdmLvKr2OGQA+PIwlAIYrsna2rRd/VJ/k="
"v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com a:mailir.citi.com include:spf-00123c01.pphosted.com include:_spf.lwo.locaweb.com.br redirect=ext1._spf.citigroup.com"
"00DD6000000VTTz=1TBD60000004Caz"
"00D3B0000000NO6=1TB7z0000000KwP"
"atlassian-domain-verification=T8oH3Uw3jSiSub6NBGpPJdPGM9QcWpLv3MsS5Em9r4b5LtoUZqpvxacSblQ4D6yK"
"google-site-verification=Cfj9vOUHlZa_U4a7XVRNmdtLO2kYaYLo-jbjCTIQLWc"
"00DKE000000LOIv=1TBKE000000Gmbb"
"177f40ac-e120-42c9-8ad2-cda6fea7d55d"
"openai-domain-verification=dv-9pX84InwVH6VhOq2WMlXloX1"

NS

2 record(s)

ns2.nsroot2.com.
ns1.nsroot1.com.

SOA

1 record(s)

nusmwdc-edns01.nsroot.net. hostmaster.citi.com. 2021120362 3600 300 2419200 3600

CAA

4 record(s)

128 iodef "mailto:CAADNS@citi.com"
128 issue "digicert.com"
128 issue "globalsign.com"
128 issuewild ";"

DS

0 record(s)

—

Not configured

DNSKEY

0 record(s)

—

Not configured

RRSIG

0 record(s)

—

Not configured

NSEC

0 record(s)

—

Not configured

NSEC3

0 record(s)

—

Not configured

SRV

0 record(s)

—

Not configured

NAPTR

0 record(s)

—

Not configured

TLSA

0 record(s)

—

Not configured

SSHFP

0 record(s)

—

Not configured

SPF

Configured

v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com a:mailir.citi.com include:spf-00123c01.pphosted.com include:_spf.lwo.locaweb.com.br redirect=ext1._spf.citigroup.com

DMARC

Configured

v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com

DKIM

Selector s1

k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70VwlLv8AgdXCtRMHsCFCeLEhQtZy9wRBifxu/wWkiKc2gXhB+kH2xI36PM9RYvNpZnSVUmdYEdBkuCkLQ9QE/c8gRFY1zY6NUZp+GpjeHGzRC1dj6NCHdmNj02nyyIPRdtmPP1HundqZKtTTGVTzXxVunzmeGaTulq32czy8TivMferUtBVVaOCu2m5wrIGMZZF7n41jpkL1uQFdJhaiiLIY87X1F5+5eNvepZsBaDAuwFOBxYJ3hbL83dSPmawYBhvRWHFg7vNRx68mOGBWZ0NcaXZei7gxSZWWwMdOUPMDd6wTvSwUvDPIs6ET0m45Un8//BrYB5UKJW04Kd0sQIDAQAB

Analyzed webpageMetadata and HTTP response

Title and description

Extracted

Title

Credit Cards, Banking, Mortgage, Personal Loans | Citi.com

Description

Final URL

https://www.citi.com/

HTTP status

206

HTTP

Status

HTTP/2 403

Final URL

https://www.citi.com/

Version

Server

AkamaiGHost

X-Powered-By

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available

Yes

Issuer

DigiCert Inc

www.citi.com

Valid from

2026-04-09T19:00:00-05:00

Valid until

2026-10-08T18:59:59-05:00

Days remaining

Protocol

TLSv1.2

Cipher

ECDHE-RSA-AES256-GCM-SHA384

Security headers

0 active

—

HSTSNot detected

—

Content Security PolicyNot detected

—

X-Content-Type-OptionsNot detected

—

X-Frame-OptionsNot detected

—

Referrer PolicyNot detected

—

Permissions PolicyNot detected

—

Cross-Origin-Opener-PolicyNot detected

—

Cross-Origin-Embedder-PolicyNot detected

—

Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Consistent

✓

Consistent propagation

5 public resolvers queried.

ResolverServerResultLatency

Google

8.8.8.8

104.94.222.171, 104.96.178.165

61,81 ms

Cloudflare

1.1.1.1

104.94.222.171, 104.96.178.165

45,37 ms

Quad9

9.9.9.9

104.94.222.171, 104.96.178.165

43,68 ms

OpenDNS

208.67.222.222

104.94.222.171, 104.96.178.165

33,31 ms

AdGuard

94.140.14.14

104.94.222.171, 104.96.178.165

67,06 ms

IP, geolocation and ASNAssociated network information

104.94.222.171

No data

success

country

region

city

asn

organization

isp

104.96.178.165

No data

success

country

region

city

asn

organization

isp

Visitor information

Visitor

216.73.217.62

reverse

country

country_code

region

city

latitude

longitude

isp

organization

asn

timezone

browser

Other

language

user_agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

is_bot

Yes

cloudflare

SMTPEmail port connectivity

mx-a.mail.citi.com

Port 25: Closed/unreachable - 25.5 ms - 
Port 465: Closed/unreachable - 73.1 ms - 
Port 587: Closed/unreachable - 48.6 ms -

Recently analyzed domains

View all →

readymag.com90 www.news.bbc.co.uk4 z9x8c7v6b5-debug-trigger-wapdns.com4 active24.cz95 enamad.ir42 remitly.com83 adminforge.de96 gazprominvestholding.ru57 muvizu.com59 cloudflare.com94