citibikenyc.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 745 ms crawled 2026-05-15

US · 52.54.211.120 · AS14618 Amazon.com, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector travel type homepage

HTML metadata

Description: Experience the best way to get around Manhattan, Brooklyn, Queens, Hoboken & Jersey City with Citi Bike, New York’s bike share system.
Language: en-US
Canonical: https://citibikenyc.com/

Open Graph

url: https://citibikenyc.com/
title: Citi Bike: NYC’s Official Bike Sharing System | Citi Bike NYC
description: Experience the best way to get around Manhattan, Brooklyn, Queens, Hoboken & Jersey City with Citi Bike, New York’s bike share system.

Technology

Server: envoy-iad
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdn.lyft.com×30
images.ctfassets.net×5
lyft-lastmile-production-iad.s3.amazonaws.com×4
www.lyft.com×2
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2012-04-17

Expires

2027-04-17 331 days left

Updated

2026-04-13

Name servers

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

DNS records live

NS

ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

MX

Show 6 MX records

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com
32767 ms94967691.msv1.invalid

TXT

9j0sj9gj2s7b24dmmtcgkq846qbbrj7c
24rspc1sfig7vhlbhrjte1t8cu

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:spf.mandrillapp.com include:mail.zendesk.com ip4:216.54.179.36 ip4:209.236.100.98 include:spf.8d.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:6ig9o43x@ag.us.dmarcian.com;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-11-12 to 2026-12-12

Expires in 205 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://citibikenyc.com/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: DENY