Email Authentication

citi.com

SPF

warning
Declares which servers may send mail for this domain.
v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com a:mailir.citi.com include:spf-00123c01.pphosted.com include:_spf.lwo.locaweb.com.br redirect=ext1._spf.citigroup.com

DKIM

pass
Cryptographic signature on outbound mail (selector: s2).
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrWqHzImnl5jdo1qB2POPs9p7b5dX/XASLe7FjURN6AMF6g0PSHMvxVKI4JiVy8FMUSbdbQ5sr+bAQccVN7/BWdSfwL1LUdzooBW8a5NDkEQ6KwmFj1bwdxpvFmR6eZVJICGO/DDGx8qGAFQJM/TxZ2e1oBI/Sh1+WEpKd5rKgLQIDAQAB

DMARC

pass
Tells receivers what to do with mail that fails SPF/DKIM. Policy: reject.
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com

Mail Servers (MX)

5 mx-b.mail.citi.com
5 mx-a.mail.citi.com