Generated: 2026-08-09T11:01:16-05:00
| Status | Check | Points | Details |
|---|---|---|---|
| OK | IPv4 (A) | 30/30 | 2 IPv4 address(es) detected. |
| ERROR | IPv6 (AAAA) | 0/10 | 0 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 2 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 2 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| ERROR | DKIM | 0/20 | No tested DKIM selector responded. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 60 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| ERROR | HTTP security headers | 0/35 | 0 of 9 evaluated headers detected. |
| OK | PTR reverse DNS | 30/30 | PTR: a104-96-178-165.deploy.static.akamaitechnologies.com |
| OK | IPv4 diversity | 35/35 | Two or more IPv4 addresses receive full points. |
| ERROR | IPv6 connectivity | 0/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| ERROR | HTTP response | 0/40 | HTTP/1.1 403 Forbidden |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |
| Tipo | Values |
|---|---|
| A | 104.96.178.165 104.94.222.171 |
| AAAA | |
| CNAME | |
| MX | 5 mx-a.mail.citi.com. 5 mx-b.mail.citi.com. |
| TXT | "paloaltonetworks-site-verification=3882d978b07397802d48b9068f445c4de7b6e8fc234da8251d8d77cc0e055342" "facebook-domain-verification=2amqbctg7cv6hq0dxq4tf107b3y0zn" "MS=ms92288257" "postman-domain-verification=b0973f7c46e67edf55bb3d7f0de30d91ae3c1329d2512ad912375d873557ec111f5e579af0d3e0903d8ff7cf1ebfb3c9e219bbdbf12203912f850ab59087acee" "MS=617A9E7598377F278D9D3B8CEBB893E897E4391D" "globalsign-domain-verification=5333822B44304398DE567C2747872C29" "google-site-verification=jyExexYbISl-RPnkFRcw-mDH_aR3jJH71dDGXCNvAUQ" "google-site-verification=aFfLeCV8R5dO_bwkfnkyLB-RaRNaZ_vYRC_yM_z6rSM" "google-site-verification=W1oZvZ4pAy7ASU5vtQdbeLvsM-BLaTkQqUKHkEfkKW8" "v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com include:spf-00123c01.pphosted.com redirect=ext1._spf.citigroup.com" "google-site-verification=B2RTefeDQDD6q_djOf22I7ncFCBM1hs0OuR29V5rbbo" "google-site-verification=Lu5ecxuGzVLD5xOgdMcF244KOFnquxxCegkBp8DUuBY" "google-site-verification=fFBk708T6VrNiFf8tgKZCw8vlZRvagtVZl-EnvQcOzY" "cisco-ci-domain-verification=4ff6832706517f60b04d042675c64a5525964fb03e1eb52365349b8b765063df" "webexdomainverification.9L49J=8ea68d0a-1e43-4ae8-9f61-f0dc3a1ba394" "google-site-verification=a5KdIF5qvy8oEnllolMuPZkvHZiN39w_Sc_wqWtJZDI" |
| NS | ns1.nsroot1.com. ns2.nsroot2.com. |
| SOA | ns1.nsroot1.com. hostmaster.citi.com. 2021104026 3600 300 2419200 3600 |
| CAA | 128 issuewild ";" 128 issue "digicert.com" 128 iodef "mailto:CAADNS@citi.com" 128 issue "globalsign.com" |
| DS | |
| DNSKEY | |
| RRSIG | |
| NSEC | |
| NSEC3 | |
| SRV | |
| NAPTR | |
| TLSA | |
| SSHFP |