Reports / citi.com
citi.com
We found 213 subdomains of citi.com in certificate transparency logs, passive DNS and DNS brute force; 166 resolve right now, including api.citi.com, account.citi.com and docs.citi.com. citi.com is registered with CSC Corporate Domains, Inc. since 1998-12-29 and expires 2032-12-29. Its SSL certificate from DigiCert Inc expires in 189 days. For email it has an SPF record, DMARC set to reject and DKIM keys on 2 common selectors.
- Registration
- CSC Corporate Domains, Inc.Since 1998-12-29 · expires 2032-12-29
- SSL certificate
- 189 days leftDigiCert Inc
- Subdomains
- 166 live213 discovered in total
- Email authentication
- SPF, DMARC, DKIMDMARC policy: reject
DNS records
6 of 7 types| A2 |
|
| AAAA | No AAAA records |
| MX2 |
|
| TXT74 |
Show all 74
|
| NS2 |
|
| CAA4 |
|
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via rdap.org- Registrar
- CSC Corporate Domains, Inc.
- Registered
- 1998-12-29
- Expires
- 2032-12-29
- Last updated
- 2023-02-03
- Registry handle
- 3743095_DOMAIN_COM-VRSN
- Nameservers
- ns1.nsroot1.comns2.nsroot2.com
- Status
- client delete prohibitedclient transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 189 days left- Issuer
- DigiCert IncCN=DigiCert EV RSA CA G2,O=DigiCert Inc,C=US
- Subject
- www.citi.comCN=www.citi.com,O=Citigroup Inc.,L=New York,ST=New York,C=US,2.5.4.5=2154254,2.5.4.15=Private Organization,1.3.6.1.4.1.311.60.2.1.2=Delaware,1.3.6.1.4.1.311.60.2.1.3=US
- Valid from
- 2026-09-24 00:00 UTC
- Valid until
- 2027-04-10 23:59 UTC
- Serial number
- 8703022869344606428045558446747675624
- Names covered (78)
- www.citi.comaccitrade.comaccitrade.com.mxbanamex.comblog.citigroup.comcareers.citigroup.comciti.co.idciti.comcitibank.aecitibank.co.idcitibank.co.krcitibank.co.thcitibank.co.ukcitibank.comcitibank.com.cncitibank.com.hkcitibank.com.sgcitibank.com.vncitibank.czcitibank.hucitibank.plcitibank.skcitibankonline.plciticards.com
Show all 78
citidirect.comcitifx.comcitifxpulse.comcitigold.co.krcitigold.com.hkcitigold.com.sgcitigold.plcitigroup.comcitigroup.jpcitimanager.comcitipay.citi.comcitithankyoucard.comcititravel.comcitivelocity.comeurope.citigold.citibank.comfindmyciti.comhomeownersupport.cominvestments.citi.comipb.citi.comipb.citibank.co.ukipb.citibank.comipb.citibank.euipbus.citi.comipbusclientappreciation.citi.comrecognitionprogram.citi.comsecure.citi.comuniversalcard.comworkday.citi.comwww.blog.citigroup.comwww.cardbenefits.citi.comwww.careers.citigroup.comwww.citi.co.idwww.citibank.aewww.citibank.co.idwww.citibank.com.twwww.citibank.czwww.citibank.huwww.citibank.skwww.citigroup.jpwww.citimanager.comwww.citipay.citi.comwww.citithankyoucard.comwww.cititravel.comwww.europe.citigold.citibank.comwww.investments.citi.comwww.ipb.citi.comwww.ipb.citibank.co.ukwww.ipb.citibank.comwww.ipb.citibank.euwww.ipbus.citi.comwww.ipbusclientappreciation.citi.comwww.searscard.comwww.universalcard.comwww4.citi.com
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
166 live · 213 discovered- 2008awards.transactionservices.citi.com23.53.11.236
- account.citi.com23.62.230.149
- adminbindid.citi.comadmin.citi.bindid.io
- aiadev.citi.com23.215.0.132
- alert.citi.comd2wlsc6scnh60h.cloudfront.net
- anniversary.citi.com72.3.185.212
- api.citi.com23.39.184.219
- apibindid.citi.com104.18.26.25
- applynow4.citi.com23.62.230.149
- applynow5.citi.comwww2.citi.com
- applyonline2.citi.com23.205.106.179
- applyonline5.citi.com23.62.230.149
- applyonline6.citi.com23.62.230.149
- aspac.sit.api.citi.com104.81.175.172
- aspac.tts.api.citi.com23.39.184.219
- aspac.tts.sandbox.developer.citi.com104.81.175.172
- autodiscover.citi.com192.193.197.19
- b.ns.india.citi.com65.125.54.134
- b2bclient.paymentexchange.cte.transactionservices.citi.com13.227.65.100
- botapigateway.citi.com23.12.147.74
- brandportal.citi.comciti.brand-portal.adobe.com
- calculator.citi.com108.60.156.177
- cfptt.citi.com23.53.35.137
- citi.enterprise.citi.com23.53.11.138
- citibank.citi.com136.147.129.27
- citiexecutiveaadvantage.citi.com23.55.176.230
- citifirstmetrics.citi.com82.98.90.120
- citiflexlineofcredit.citi.com23.62.230.149
- citigoldchallenge.citi.com23.62.230.149
- citigroupsoawshk.citi.com192.193.19.22
- citiinstitutionalconsulting.citi.com23.62.230.149
- citimarketstreamuat2.citi.com199.67.183.132
- citipay.dit1.citi.com23.13.158.32
- citiplanner.citi.com184.25.127.87
- citishop.citi.com34.120.5.192
- commercemedia.citi.com34.117.19.224
- consumersoauat.citi.com192.193.173.112
- content22.retailservicescommercial.citi.comh-retailservicescommercial.citi.online-metrix.net
- creditlimitincrease.citi.com23.62.230.149
- creditlimitincreasechat.citi.comwww2.citi.com
- creditmonitoring.citi.com23.62.230.149
- csmsuppliers.citi.com149.96.33.193
- depositaryreceipts.citi.comdepositaryreceipts.citi.com.edgekey.net
- desktop.asia.citi.com199.67.133.140
- dev2.auth.citi.com23.12.147.12
- developer.citi.com23.39.184.219
- dit25.online.citi.com23.13.166.190
- dit31.online.citi.com23.13.166.190
- dit42.online.citi.com23.13.166.190
- dividend2g.citi.com23.219.154.5
- docs.citi.comwww.docs.citi.com.edgekey.net
- e555010102.citi.com192.193.36.32
- e555010103.citi.com192.193.36.33
- e555010202.citi.com192.193.79.32
- e555010205.citi.com192.193.79.35
- e555010206.citi.com192.193.79.36
- e555020102.citi.com192.193.244.33
- edeliveryperf.citi.com192.193.200.197
- emea.sit.api.citi.com104.81.175.172
- envision.citi.com192.193.103.83
- eurofinance.citi.com23.62.230.149
- ewsnsrootna.citi.com192.193.120.147
- ewsnsrootqr.citi.com192.193.197.83
- ewsnsrootzh.citi.com213.170.215.20
- exchangetest.icg.citi.com199.67.183.183
- exffmshy03.citi.com213.170.215.2
- exffmshy04.citi.com213.170.215.67
- exjpmahy514.citi.com192.193.151.67
- exlnmshy512.citi.com213.170.213.216
- exnjmahy26.citi.com153.40.185.135
- exsgmshy511.citi.com192.193.67.151
- f.ipbservices.citi.comf.chtah.com
- fanlife.citi.com162.242.128.67
- fastlink.citi.com64.14.19.59
- fastlinkuat.citi.com64.41.182.50
- financialeducation.citi.com23.221.227.39
- finapp.financialtools.citi.com64.14.19.75
- flyabove.citi.com23.219.154.5
- friendsandfamily.citi.com23.219.154.5
- fundremoteaccess.transactionservices.citi.com12.30.1.48
- graduaterecruitment.citi.com23.62.230.149
- homeloans.citi.com184.192.221.195
- image.info15.citi.comtlhsq0bww1369r62vh7nzy3049gm.image-sap.sfmc-content.com
- inboundrgcna.citi.com153.40.185.1
- inps.citi.comwww2.citi.com
- instagramterms.citi.com162.242.128.65
- investmentpublications.citi.com23.205.106.179
- l.info12.citi.com104.18.26.197
- labs.citi.com23.13.166.114
- lifevalidationservices.citi.com81.139.44.64
- login.na.cards.spring.citi.com150.171.109.72
- m.globalbanking.icg.citi.comwww2.citi.com
- metrics.citi.comciti.com.sc.omtrdc.net
- militaryinitiative.citi.com23.62.230.149
- mobilemoneyforum.citi.com23.62.230.149
- mobilesoaaspac.citi.commobilesoaaspac.citi.com.edgekey.net
- mobilesoactoze.citi.com23.39.184.219
- mobilesoaicgze.citi.com23.39.184.219
- mobilesoapbwmxzsa.citi.com23.39.184.219
- mobilesoapbwzsa.citi.commobilesoa.citi.com.edgekey.net
- mobilesoapbwzsa1.citi.commobilesoa.citi.com.edgekey.net
- mobilesoapbwzsa2.citi.com23.39.184.219
- mobilesoasit.citi.commobilesoasit.citi.com.edgekey.net
- mobilesoasitpbwzsa.citi.com104.81.175.172
- mobilesoasitze1.citi.com104.81.175.172
- mobilesoasitze2.citi.com104.94.116.41
- mobilesoattsze.citi.com23.39.184.219
- mobilesoauatctoze.citi.commobilesoauat.citi.com.edgekey.net
- mobilesoauaticgze.citi.com104.81.175.172
- mobilesoauatpbwzsa.citi.com104.81.175.172
- moveabroad.citi.com23.215.0.230
- mta3.info15.citi.com13.111.204.180
- mtg.citi.com10.19.206.68
- mx-b-cs.citi.com67.231.152.48
- openwealth.citi.com23.54.127.36
- p2papprovals.citi.com23.12.147.74
- p2psuppliers.citi.com23.53.11.135
- partner.citi.com23.12.147.22
- pay.citi.com100.25.212.96
- payment.citi.com139.131.82.150
- personalwealthmanagement.citi.com136.147.129.27
- progressmakers.citi.com23.62.230.149
- protectionbenefits.citi.com45.60.31.69
- qa.sandbox.apihub.citi.com104.81.175.172
- qrauth.citi.com104.18.6.7
- qraux.citi.com104.18.6.7
- qrsignin.citi.com104.18.6.7
- rewarding.citi.com23.62.230.149
- ringtones.citi.com23.55.176.230
- secure.citi.com23.12.147.23
- securecredentialserver.citi.com44.253.175.148
- services.citi.com23.12.147.83
- sf.citi.com161.47.123.56
- smtprelayinbound.citi.com192.193.193.91
- spring.citi.com23.53.35.166
- subscriptions.citi.com72.32.3.239
- supplierfinance.citi.comwww2.citi.com
- techleadership.citi.com23.39.174.245
- thankyou2g.citi.com23.62.230.149
- tts.sandbox.api.citi.comsan.sandbox.api.citi.com.edgekey.net
- uat.apitaxplatform.brazil.citi.comuat.apitaxplatform.brazil.citi.com.edgekey.net
- uat.citi.com23.13.149.143
- uat.internal.fundgovernance.transactionservices.citi.com66.179.66.154
- uat.investmentstrategies.citi.comuat.investmentstrategies.citi.com.edgekey.net
- uat.myassetbasedlending.citi.com23.53.35.144
- uat.sharedservices.fundgovernance.transactionservices.citi.com199.67.137.212
- uat.sworigin.icg.citi.com192.193.183.36
- uat4.citi.com23.12.147.46
- ventures.citi.com23.62.230.149
- veteraninitiative.citi.com23.62.230.149
- video.citi.com162.159.135.91
- voiceit.citi.com23.62.230.149
- vpn.asia.citi.com199.67.133.10
- wealth.citi.com23.12.147.80
- welcome.citi.com23.12.147.23
- whatsyourstory.citi.comwww2.citi.com
- wireless.citi.com23.62.230.149
- wires.citi.com23.13.149.169
- www.applynow2.citi.comwww2.citi.com
- www.citi.com23.13.166.113
- www.investments.citi.com23.12.147.23
- www.sweepstakes.stories.citi.com216.250.63.5
- www.travelbenefits.citi.com23.62.230.149
- www2.citi.comciti.mdc.edgesuite.net
- www3.citi.comsni.www.citi.com.edgekey.net
- www4.citi.com23.12.147.23
No subdomains found.
47 more seen in CT logs and passive DNS that don't resolve now
- appmailout1.citi.com
- auth.citi.com
- b.ns.digitalmoney.citi.com
- citihomeloans.citi.com
- communities.citi.com
- consumersoahk.citi.com
- contents3.00110.citi.com
- d.ns.commercialbank.citi.com
- dev.auth.citi.com
- e.ns.citidirectbe.citi.com
- e555010201.citi.com
- e555010203.citi.com
- ewsnsrootkrcgm.citi.com
- ewsnsroottn.citi.com
- exgtmahy31.citi.com
- exhkmshy06.citi.com
- exhkmshy511.citi.com
- exjpmahy513.citi.com
- exmwmahy26.citi.com
- exmwmahy32.citi.com
- exmwmahy61.citi.com
- exmwmahy62.citi.com
- exnjmahy31.citi.com
- exnjmahy61.citi.com
- exnjmahy62.citi.com
- exsgmshy04.citi.com
- extracash.citi.com
- features.citi.com
- financialtoolsuat.citi.com
- gfts-p2psuppliers.citi.com
- inboundrgcnsrootap.citi.com
- incredouble.citi.com
- learning.citi.com
- m.jobs.citi.com
- mdc.uat.citi.com
- p2pmobile.devtec.citi.com
- retailservicescommercial.citi.com
- san.sandbox.api.citi.com
- servicenowhr.citi.com
- sni.www.citi.com
- supplierportal.devtec.citi.com
- sweepstakes.stories.citi.com
- training.citi.com
- uat.citigoldlounges.citi.com
- uat.marketinsights.citi.com
- vcse.emealabs.citi.com
- vpn.citi.com
Shared infrastructure, collapsed:
Sources: rapiddns 84 · dns-brute 14 · virustotal 199
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com a:mailir.citi.com include:spf-00123c01.pphosted.com include:_spf.lwo.locaweb.com.br redirect=ext1._spf.citigroup.com
DMARC Present
p=reject
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com
DKIM 2 found
s1._domainkeys2._domainkey
Show public keys
s1._domainkey.citi.com
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70VwlLv8AgdXCtRMHsCFCeLEhQtZy9wRBifxu/wWkiKc2gXhB+kH2xI36PM9RYvNpZnSVUmdYEdBkuCkLQ9QE/c8gRFY1zY6NUZp+GpjeHGzRC1dj6NCHdmNj02nyyIPRdtmPP1HundqZKtTTGVTzXxVunzmeGaTulq32czy8TivMferUtBVVaOCu2m5wrIGMZZF7n41jpkL1uQFdJhaiiLIY87X1F5+5eNvepZsBaDAuwFOBxYJ3hbL83dSPmawYBhvRWHFg7vNRx68mOGBWZ0NcaXZei7gxSZWWwMdOUPMDd6wTvSwUvDPIs6ET0m45Un8//BrYB5UKJW04Kd0sQIDAQAB
s2._domainkey.citi.com
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrWqHzImnl5jdo1qB2POPs9p7b5dX/XASLe7FjURN6AMF6g0PSHMvxVKI4JiVy8FMUSbdbQ5sr+bAQccVN7/BWdSfwL1LUdzooBW8a5NDkEQ6KwmFj1bwdxpvFmR6eZVJICGO/DDGx8qGAFQJM/TxZ2e1oBI/Sh1+WEpKd5rKgLQIDAQAB
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/citi.com" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/citi.com",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/citi.com",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/citi.com");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish