DNS Report: citibank.com

Generated: 2026-08-10T14:02:37-05:00

64/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
ERRORIPv6 (AAAA)0/100 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
ERRORDNSSEC chain0/15Both DS and DNSKEY are required.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/202 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
ERRORDKIM0/20No tested DKIM selector responded.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5559 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
ERRORHTTP security headers0/350 of 9 evaluated headers detected.
OKPTR reverse DNS30/30PTR: a104-94-222-171.deploy.static.akamaitechnologies.com
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
ERRORIPv6 connectivity0/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
ERRORHTTP response0/40HTTP/1.1 403 Forbidden
ERRORHTTPS final URL0/20Final URL is not HTTPS.

DNS Records

TipoValues
A
104.94.222.171
104.96.178.165
AAAA
CNAME
MX
5 mx-b.mail.citi.com.
5 mx-a.mail.citi.com.
TXT
"paloaltonetworks-site-verification=59fcee26fb9ae46cb912e8ec453faa3b82c65ee0e94f7fb7de1a59b07e9b8cf3"
"postman-domain-verification=80f5e8b5b0eb9d94f6c42fc72ee42bef0585ba996bddeeda33442ee5f1db593d4aede826d4d6e58b40be0681a2f40b86aff5238e76c95e449c963bad2e3ffc14"
"google-site-verification=l0yLgWkGs-ik3cNg8LCqI4IRtJe_qvzRYILtrnQ-L4E"
"google-site-verification=kZISuG3O5lKpwO_y-LOv8wR6wuDt8TVjeU8hzFVlI4s"
"VISA=2E2D03BABFF0208352B6A802723F7BD4"
"v=spf1 a:mail.citigroup.com ip4:217.29.160.12 ip4:84.45.73.5 include:spf-00123c01.pphosted.com ~all"
"facebook-domain-verification=3afsyr7t6cmarl3sc8dfohlz53n4ho"
NS
ns1.nsroot1.com.
ns2.nsroot2.com.
SOA
ns1.nsroot1.com. hostmaster.citi.com. 2021105354 3600 300 2419200 3600
CAA
128 issue "globalsign.com"
128 issue "digicert.com"
128 issuewild ";"
128 iodef "mailto:CAADNS@citi.com"
128 issue "visa.com"
DS
DNSKEY
RRSIG
NSEC
NSEC3
SRV
NAPTR
TLSA
SSHFP