citicorp.com

Observed Jul 21, 2026, 17:07 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Not responding

Email byProofpoint

tranco_100k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat citicorp.com actually stands on - every host below is a signed observation

citicorp.com

A / AAAA

104.94.222.171104.96.178.165

unattributedserves the site

ns1.nsroot1.comns2.nsroot2.com

nsroot1.com + nsroot2.comanswers its DNS

mx-b.mail.citi.commx-a.mail.citi.com

Proofpointreceives its email

DNS Records

A 2

104.94.222.171
104.96.178.165

MX 2

5mx-b.mail.citi.com
5mx-a.mail.citi.com

TXT 4

paloaltonetworks-site-verification=f3c402906a16f1ee11b874772759ff7093239a0a4b2acc8783dc5e3e1042dc1c
v=spf1 a:mail.citigroup.com ip4:217.11.194.67 ip4:217.11.192.50 ip4:217.11.193.88 include:spf-00123c01.pphosted.com ~all
postman-domain-verification=295722b205b6ea1a4c7f8da465d3f301164ebc08250aa17cc579719675d53a43cef43ff5382673f8085ffc38d0c612d631541c67b5579680bdc119a65b31f154
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com

NS 2

ns1.nsroot1.com
ns2.nsroot2.com

SOA 1

ns1.nsroot1.com hostmaster.citi.com

CAA 4

iodef "mailto:CAADNS@citi.com"
issue "digicert.com"
issue "globalsign.com"
issuewild ""

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citicorp.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/citicorp.com">
  <img src="https://domaindrift.io/badge/citicorp.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for citicorp.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_e8c18152c7924172
Output Hash: 57159c7f26477998580e9734cded4ab556ae187f8aed553362e714f2a7af4dc7
Signature: ed25519:912879d3f261de52e4cee8c9c3d7521eeec2c7b766d50592be5a55beae7e0ae1311fff9d8d60cde1f2fb2d66438613230a84a17e33faa96d1160a98b930beb08
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/citicorp.com