Email Authentication
citi.com
SPF
warningDeclares which servers may send mail for this domain.
v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com a:mailir.citi.com include:spf-00123c01.pphosted.com include:_spf.lwo.locaweb.com.br redirect=ext1._spf.citigroup.com
DKIM
passCryptographic signature on outbound mail (selector: s2).
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrWqHzImnl5jdo1qB2POPs9p7b5dX/XASLe7FjURN6AMF6g0PSHMvxVKI4JiVy8FMUSbdbQ5sr+bAQccVN7/BWdSfwL1LUdzooBW8a5NDkEQ6KwmFj1bwdxpvFmR6eZVJICGO/DDGx8qGAFQJM/TxZ2e1oBI/Sh1+WEpKd5rKgLQIDAQAB
DMARC
passTells receivers what to do with mail that fails SPF/DKIM. Policy: reject.
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc.reports.rua@citi.com
Mail Servers (MX)
5 mx-b.mail.citi.com
5 mx-a.mail.citi.com