Skip to content
Gridlode
Rank #5,241Updated November 10, 2026

citigroup.com

Citi | Global Investment Bank and Financial Services

citigroup.com is registered with CSC Corporate Domains, Inc. since April 6, 1998 (28.6 years). The registration expires on April 5, 2032. The site runs on Next.js, React, Akamai and 10 other technologies. Its email security grade is D. Its SSL certificate is issued by DigiCert Inc and is valid for 152 more days.

Domain age
28.6 yrs
Technologies
13
Email security
D
SSL days left
152

Registration

RegistrarCSC Corporate Domains, Inc.
IANA ID299
RegisteredApril 6, 1998
ExpiresApril 5, 2032
UpdatedFebruary 3, 2023
Statusclient delete prohibited, client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Name serversns1.nsroot1.com, ns2.nsroot2.com
DNSSECNot signed

DNS records

TypeValueTTL
A104.96.178.1651647
A104.94.222.1711647
MXmx-a.mail.citi.com 51058
MXmx-b.mail.citi.com 51058
NSns1.nsroot1.com3600
NSns2.nsroot2.com3600
CAAiodef 128 mailto:[email protected]3600
CAAissue 128 digicert.com3600
CAAissue 128 globalsign.com3600
CAAissuewild 128 ;3600
TXTMS=ms922882573600
TXTMS=617A9E7598377F278D9D3B8CEBB893E897E4391D3600
TXTfacebook-domain-verification=2amqbctg7cv6hq0dxq4tf107b3y0zn3600
TXTglobalsign-domain-verification=5333822B44304398DE567C2747872C293600
TXTwebexdomainverification.9L49J=8ea68d0a-1e43-4ae8-9f61-f0dc3a1ba3943600
TXTgoogle-site-verification=B2RTefeDQDD6q_djOf22I7ncFCBM1hs0OuR29V5rbbo3600
TXTgoogle-site-verification=Lu5ecxuGzVLD5xOgdMcF244KOFnquxxCegkBp8DUuBY3600
TXTgoogle-site-verification=W1oZvZ4pAy7ASU5vtQdbeLvsM-BLaTkQqUKHkEfkKW83600
TXTgoogle-site-verification=a5KdIF5qvy8oEnllolMuPZkvHZiN39w_Sc_wqWtJZDI3600
TXTgoogle-site-verification=aFfLeCV8R5dO_bwkfnkyLB-RaRNaZ_vYRC_yM_z6rSM3600
TXTgoogle-site-verification=fFBk708T6VrNiFf8tgKZCw8vlZRvagtVZl-EnvQcOzY3600
TXTgoogle-site-verification=jyExexYbISl-RPnkFRcw-mDH_aR3jJH71dDGXCNvAUQ3600

Technology stack

Cookie consent
JavaScript framework
JavaScript library
Programming language

SSL certificate

ValidValid
IssuerUS, DigiCert EV RSA CA G2, DigiCert Inc
ExpiresApril 11, 2027
Days remaining152
ProtocolTLSv1.2
Nameswww.citi.com, accitrade.com, accitrade.com.mx, banamex.com, blog.citigroup.com, careers.citigroup.com, citi.co.id, citi.com, citibank.ae, citibank.co.id, citibank.co.kr, citibank.co.th

Email security

DScore 59/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnSPF has no 'all' rule, so mail from unlisted servers gets a neutral result. End it with ~all or -all.
  • warnNo DKIM key found at common selectors (google, selector1, selector2, default, k1, k2, s1, s2, ...). DKIM may still use a custom selector we cannot guess.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected], mailto:[email protected].
  • good2 MX record(s) found.

Homepage metadata

TitleCiti | Global Investment Bank and Financial Services
DescriptionCiti is a leading global bank for institutions with cross-border needs, a global provider in wealth management and a U.S. personal bank.
Languageen
Canonicalhttps://www.citigroup.com/global
Structured dataOrganization, WebSite
IndexableYes
Word count134

About citigroup.com

Who is the registrar of citigroup.com?

citigroup.com is registered with CSC Corporate Domains, Inc. (IANA ID 299).

When does citigroup.com expire?

The current registration of citigroup.com expires on April 5, 2032. It was first registered on April 6, 1998.

What technology does citigroup.com use?

We detected 13 technologies on citigroup.com, including Akamai, Cookie Consent, Next.js, React, core-js, Node.js.

Does citigroup.com protect its email with SPF and DMARC?

citigroup.com scores 59/100 (grade D) for email security. SPF has no 'all' rule, so mail from unlisted servers gets a neutral result. End it with ~all or -all. No DKIM key found at common selectors (google, selector1, selector2, default, k1, k2, s1, s2, ...). DKIM may still use a custom selector we cannot guess.

What are the name servers of citigroup.com?

citigroup.com uses ns1.nsroot1.com, ns2.nsroot2.com.