citi.com
Online Banking, Mortgages, Personal Loans, Investing | Citi.com
citi.com is registered with CSC Corporate Domains, Inc. since December 29, 1998 (27.9 years). The registration expires on December 29, 2032. The site runs on Angular, Akamai, Akamai Bot Manager and 3 other technologies. Its email security grade is C. Its SSL certificate is issued by DigiCert Inc and is valid for 152 more days.
- Domain age
- 27.9 yrs
- Technologies
- 6
- Email security
- C
- SSL days left
- 152
Registration
| Registrar | CSC Corporate Domains, Inc. |
|---|---|
| IANA ID | 299 |
| Registered | December 29, 1998 |
| Expires | December 29, 2032 |
| Updated | February 3, 2023 |
| Status | client delete prohibited, client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited |
| Name servers | ns1.nsroot1.com, ns2.nsroot2.com |
| DNSSEC | Not signed |
DNS records
| Type | Value | TTL |
|---|---|---|
| A | 104.96.178.165 | 3600 |
| A | 104.94.222.171 | 3600 |
| MX | mx-a.mail.citi.com 5 | 888 |
| MX | mx-b.mail.citi.com 5 | 888 |
| NS | ns2.nsroot2.com | 3600 |
| NS | ns1.nsroot1.com | 3600 |
| CAA | iodef 128 mailto:[email protected] | 3600 |
| CAA | issue 128 digicert.com | 3600 |
| CAA | issue 128 globalsign.com | 3600 |
| CAA | issuewild 128 ; | 3600 |
| TXT | OSV-165-cus | 3600 |
| TXT | MS=ms96393155 | 3600 |
| TXT | p8SVjdM7cxe_8urzyIqKS6ez | 3600 |
| TXT | 00D0U0000009p3B=1TBDX000000000B | 3600 |
| TXT | 00D0m0000004lAC=1TBDH0000008OJh | 3600 |
| TXT | 00D0v00000012E9=1TBRu0000000cjd | 3600 |
| TXT | 00D110000001C8Y=1TBDL0000000006 | 3600 |
| TXT | 00D180000008oCA=1TBDj000000001T | 3600 |
| TXT | 00D1b00000094cq=1TBDk0000004CA6 | 3600 |
| TXT | 00D2C000000Czue=1TBDv0000008OLi | 3600 |
| TXT | 00D2x000006MvFd=1TBJ8000000fxUM | 3600 |
| TXT | 00D300000005om9=1TBKZ000000wkEU | 3600 |
Technology stack
SSL certificate
| Valid | Valid |
|---|---|
| Issuer | US, DigiCert EV RSA CA G2, DigiCert Inc |
| Expires | April 11, 2027 |
| Days remaining | 152 |
| Protocol | TLSv1.2 |
| Names | www.citi.com, accitrade.com, accitrade.com.mx, banamex.com, blog.citigroup.com, careers.citigroup.com, citi.co.id, citi.com, citibank.ae, citibank.co.id, citibank.co.kr, citibank.co.th |
Email security
- warnSPF has no 'all' rule, so mail from unlisted servers gets a neutral result. End it with ~all or -all.
- warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
- warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
- warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
- goodSPF record found.
- goodDMARC policy is reject: mail that fails authentication is blocked.
- goodDMARC aggregate reports are sent to mailto:[email protected], mailto:[email protected].
- goodDKIM keys found (selector: s1, s2).
- good2 MX record(s) found.
Homepage metadata
| Title | Online Banking, Mortgages, Personal Loans, Investing | Citi.com |
|---|---|
| Description | Citibank offers multiple banking services that help you find the right credit cards, open a bank account for checking, & savings, or apply for mortgage & personal loans. |
| Language | en |
| Canonical | https://www.citi.com |
| Structured data | WPHeader, WebPage, BreadcrumbList, ItemList, FAQPage |
| Indexable | Yes |
| Word count | 3 |
About citi.com
Who is the registrar of citi.com?
citi.com is registered with CSC Corporate Domains, Inc. (IANA ID 299).
When does citi.com expire?
The current registration of citi.com expires on December 29, 2032. It was first registered on December 29, 1998.
What technology does citi.com use?
We detected 6 technologies on citi.com, including Akamai, Angular, Akamai Bot Manager, Content Security Policy, HSTS, Bootstrap.
Does citi.com protect its email with SPF and DMARC?
citi.com scores 74/100 (grade C) for email security. SPF has no 'all' rule, so mail from unlisted servers gets a neutral result. End it with ~all or -all. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
What are the name servers of citi.com?
citi.com uses ns2.nsroot2.com, ns1.nsroot1.com.