banamex.com

Observed 2026-07-13T00:11:00.190238225+00:00 (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Email byProofpoint

Secured byDigiCert

Also usesDocuSignGoogle Search ConsoleFigma

push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat banamex.com actually stands on - every host below is a signed observation

banamex.com

A / AAAA

104.94.222.171104.96.178.165

unattributedserves the site

ns1.nsroot1.comns2.nsroot2.com

nsroot1.com + nsroot2.comanswers its DNS

mx-a.mail.citi.commx-b.mail.citi.com

Proofpointreceives its email

TLS

www.citi.com

DigiCert Incissued its certificate

DNS Records

A 2

104.94.222.171
104.96.178.165

MX 2

5mx-a.mail.citi.com
5mx-b.mail.citi.com

TXT 16

MS=ms91144615
MS=C18C7B831E36CCE04AE8E63A5CDE7197BD34D267
docusign=25d5a170-0415-4234-9f6a-7aaa7bc4948d
docusign=42b9eaf9-dc4b-41f8-b229-38b787e463f9
docusign=64e6a9ee-add0-4f94-93be-c32b7063ffab
docusign=80aaf20b-e5c3-46b3-9050-102f6e061628
google-site-verification=EraFf1LZmqCc5fF1MR3fYF61P-CU6BcDSNE6z8VWmjY
adobe-idp-site-verification=2f5d82313aa5bdd867614e7fc9652cef84dd3ac5b9969f43e514e9bac25ce7e0
cisco-ci-domain-verification=215ae1d72e1557283fcb004a038b48e3401783c8cc8c220700e59355b8b4fc8
webexdomainverification.4C675B8AC1BDB136E053AB06FC0A3F65=df65a0ec-db27-4e5f-80bc-c9101851ab0e

NS 2

ns1.nsroot1.com
ns2.nsroot2.com

SOA 1

ns1.nsroot1.com hostmaster.citi.com

CAA 4

issue "globalsign.com"
issue "digicert.com"
iodef "mailto:CAADNS@citi.com"
issuewild ""

TLS Certificates (2)

Common Name	Issuer	Expires
`www.citi.com`	C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2	Thu, 08 Oct 2026 23:59:59 +0000
`DigiCert EV RSA CA G2`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Tue, 02 Jul 2030 12:42:50 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for banamex.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/banamex.com">
  <img src="https://domaindrift.io/badge/banamex.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for banamex.com">
</a>

Ed25519 Receipt

Receipt ID: 8e0bfbd2-7536-49b9-b12b-b573979fa53a
Output Hash: 65b334145f08633e5235d9d55ea3c4d6c4e4c1550874583c83dc33f9033e9c7d
Signature: ed25519:704863f2f38cb95a49183c418030e1c614fd831442cb87736022abd94bf2cb84942617d79c0e9e07a22e829917c7713146be51940773b4bd303db0a7c92c1b0f
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/banamex.com