citibank.com.br

Observed Jul 18, 2026, 13:42 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding

Runs onCitigroup

tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat citibank.com.br actually stands on - every host below is a signed observation

citibank.com.br

A / AAAA

192.193.174.50192.193.104.81

Citigroupserves the site

ns1.nsroot1.comns2.nsroot2.com

nsroot1.com + nsroot2.comanswers its DNS

citibank.pme1.mail.tpimidia.com

tpimidia.comreceives its email

DNS Records

A 2

192.193.174.50
192.193.104.81

MX 1

20citibank.pme1.mail.tpimidia.com

TXT 2

v=spf1 include:spf.tpimidia.com a mx ~all
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com

NS 2

ns1.nsroot1.com
ns2.nsroot2.com

SOA 1

ns1.nsroot1.com hostmaster.citi.com

CAA 4

issue "digicert.com"
issuewild ""
iodef "mailto:CAADNS@citi.com"
issue "globalsign.com"

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citibank.com.br. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/citibank.com.br">
  <img src="https://domaindrift.io/badge/citibank.com.br.svg"
       width="300" height="64" alt="DomainDrift signed observations for citibank.com.br">
</a>

Ed25519 Receipt

Receipt ID: 00b32947-abc0-4e69-8ada-e35c0b6abded
Output Hash: 7e39794bc2dc161e0e8ecee5e8601e37c05df55f21b9e60b577167cafbeb60d3
Signature: ed25519:b37e05568f754cc6306d2a0769d8106a417c59da35925ce31f1a23fe13403ee99a8147fb25e46c2102251d96cac20501a9e064c5afce15743a316c8f61e60d04
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/citibank.com.br