citibank.com

Observed 2026-07-17T13:14:43.489698002+00:00 (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAkamai International B.V

Email byProofpoint

Secured byDigiCert

Registered withCSC Corporate Domains, Inc.

Also usesFacebook/MetaGoogle Search Console

4 subdomains · tranco_20k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat citibank.com actually stands on - every host below is a signed observation

citibank.com

A / AAAA

104.94.222.171104.96.178.165

Akamai International B.Vserves the site

ns1.nsroot1.comns2.nsroot2.com

nsroot1.com + nsroot2.comanswers its DNS

mx-b.mail.citi.commx-a.mail.citi.com

Proofpointreceives its email

TLS

www.citi.com

DigiCert Incissued its certificate

DNS Records

A 2

104.94.222.171
104.96.178.165

MX 2

5mx-b.mail.citi.com
5mx-a.mail.citi.com

TXT 8

VISA=2E2D03BABFF0208352B6A802723F7BD4
facebook-domain-verification=3afsyr7t6cmarl3sc8dfohlz53n4ho
google-site-verification=kZISuG3O5lKpwO_y-LOv8wR6wuDt8TVjeU8hzFVlI4s
google-site-verification=l0yLgWkGs-ik3cNg8LCqI4IRtJe_qvzRYILtrnQ-L4E
paloaltonetworks-site-verification=59fcee26fb9ae46cb912e8ec453faa3b82c65ee0e94f7fb7de1a59b07e9b8cf3
v=spf1 a:mail.citigroup.com ip4:217.29.160.12 ip4:84.45.73.5 include:spf-00123c01.pphosted.com ~all
postman-domain-verification=80f5e8b5b0eb9d94f6c42fc72ee42bef0585ba996bddeeda33442ee5f1db593d4aede826d4d6e58b40be0681a2f40b86aff5238e76c95e449c963bad2e3ffc14
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com

NS 2

ns1.nsroot1.com
ns2.nsroot2.com

SOA 1

ns1.nsroot1.com hostmaster.citi.com

CAA 5

issuewild ""
issue "digicert.com"
issue "globalsign.com"
iodef "mailto:CAADNS@citi.com"
issue "visa.com"

TLS Certificates (2)

Common Name	Issuer	Expires
`www.citi.com`	C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2	Thu, 08 Oct 2026 23:59:59 +0000
`DigiCert EV RSA CA G2`	C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2	Tue, 02 Jul 2030 12:42:50 +0000

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citibank.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/citibank.com">
  <img src="https://domaindrift.io/badge/citibank.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for citibank.com">
</a>

Ed25519 Receipt

Receipt ID: b159c4ab-4d31-40fa-a556-2a21d3aa7845
Output Hash: d59ba85957ebffa459698584c413d647d0c89f7e3214463a0c422aab572143a1
Signature: ed25519:33c08206fe85d9f915630a0e2900f59f873f80875a9ce4b897da16d53ea66d6b7885ebac74005b800c774eff530dab0e58093a496b10ef2f1fea31077b22e507
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/citibank.com