CONTINUOUS INTERNET TELEMETRY24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT219 material changesacross 144 domains · +73 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgNOW4,691 curated domains not answering+357 vs yesterdayERRORS30,432 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED88,598 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

citigroup-global.com

Observed Jul 18, 2026, 12:19 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onHostinger International Limited
Secured byLet's Encrypt
Registered withGoDaddy.com, LLC
IPv6 · 1 subdomain · consulting
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat citigroup-global.com actually stands on - every host below is a signed observation
citigroup-global.com
A / AAAA
88.222.222.4184.32.84.742a02:4780:84:dda2:71a6:7cca:a051:49752a02:4780:84:da22:c36c:ea9a:16c2:1b80
Hostinger International Limitedserves the site
NS
artemis.dns-parking.comhermes.dns-parking.com
dns-parking.comanswers its DNS
MX
mx1.hostinger.commx2.hostinger.com
hostinger.comreceives its email
TLS
citigroup-global.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 88.222.222.41
  • 84.32.84.74

AAAA 2

  • 2a02:4780:84:dda2:71a6:7cca:a051:4975
  • 2a02:4780:84:da22:c36c:ea9a:16c2:1b80

MX 2

  • 5mx1.hostinger.com
  • 10mx2.hostinger.com

TXT 2

  • v=spf1 include:_spf.mail.hostinger.com ~all
  • v=DMARC1; p=none

NS 2

  • artemis.dns-parking.com
  • hermes.dns-parking.com

SOA 1

  • hermes.dns-parking.com dns.hostinger.com

CAA 12

  • issue "globalsign.com"
  • issuewild "digicert.com"
  • issue "sectigo.com"
  • issuewild "letsencrypt.org"
  • issuewild "globalsign.com"
  • issue "letsencrypt.org"
  • issuewild "pki.goog"
  • issuewild "comodoca.com"
  • issue "pki.goog"
  • issuewild "sectigo.com"

TLS Certificates (2)

Common NameIssuerExpires
citigroup-global.com C=US, O=Let's Encrypt, CN=R13 Sat, 22 Aug 2026 18:19:02 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for citigroup-global.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for citigroup-global.com <a href="https://domaindrift.io/t/citigroup-global.com"> <img src="https://domaindrift.io/badge/citigroup-global.com.svg" width="300" height="64" alt="DomainDrift signed observations for citigroup-global.com"> </a>

Ed25519 Receipt

Receipt ID
105b9ed1-5b12-4019-ad98-b9755a0d3adc
Output Hash
81e5ca0b22866a1f9f5f0b016a3ccd403428269ee695c19b0b35b322a3a4c2ab
Signature
ed25519:47b075c44f2be1381c07be2a5a3a0f488033ff839f7480c528e7f5dc603305e4cd4a8c13fc6bb652c0529dd6559ab1b6e47781a9ecd6da9eedb85513c9ba3205
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser