natwest.com

Observed 2026-07-15T11:51:56.491Z (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Also usesGoogle Search ConsoleFacebook/MetaAtlassian

IPv6 · 4 subdomains · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat natwest.com actually stands on - every host below is a signed observation

natwest.com

A / AAAA

13.107.253.6913.107.226.692620:1ec:48:1::692620:1ec:29:1::69

Cloudflareserves the site

udns2.cscdns.ukudns1.cscdns.net

cscdns.uk + cscdns.netanswers its DNS

mail01.rbs.commail14.rbs.commail13.rbs.commail16.rbs.com+4 more

rbs.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.natwest.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time37 ms

DNS resolutionNOERROR

Redirect chain

https://www.natwest.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

13.107.253.69
13.107.226.69

AAAA 2

2620:1ec:48:1::69
2620:1ec:29:1::69

MX 8

10mail01.rbs.com
10mail14.rbs.com
10mail13.rbs.com
10mail16.rbs.com
10mail04.rbs.com
10mail03.rbs.com
10mail02.rbs.com
10mail15.rbs.com

TXT 30

MS=ms82743154
hcp-domain-verification=550d75fe9c7804780b08133b69728475969e92093740d822ccced90ad4722d5d
mongodb-site-verification=T0NwD4yuhh81Or9GwaLxjrG8On2lI48i
google-site-verification=k1rgRZEsZdrUjWUuva53F0tv-0JuTQs5aK9Oobxknrk
adobe-idp-site-verification=641792395842e9c7dfd8d65c821ed7a9e09eb29ce1e518d34ca193bdf66fa4ec
pexip-portal-domain-verification=5b44155a-b3af-4ff2-afb6-16562cbb8540
v=spf1 ip4:155.136.80.0/24 ip4:80.75.73.242 ip4:81.145.55.71 ip4:82.144.239.194 ip4:195.3.184.231 ip4:195.3.184.230 ip4:195.225.218.101 ip4:195.184.243.2 ip4:155.136.18.0/24 -all
facebook-domain-verification=pm28mp1iyyit8ndzk9syde2lbo7sf3
twilio-domain-verification=acbe70f92d5a4aef2b80c928ecfc2f19
pexip-ms-tenant-domain-verification=5b44155a-b3af-4ff2-afb6-16562cbb8540

NS 2

udns2.cscdns.uk
udns1.cscdns.net

SOA 1

udns1.cscdns.net premiumdns.support.neustar

CAA 4

issue sectigo.com
issue quovadisglobal.com
issue digicert.com
iodef mailto:RBS.Group.PKI.Certificates@rbs.co.uk

TLS Certificates (0)

None.

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for natwest.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/natwest.com">
  <img src="https://domaindrift.io/badge/natwest.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for natwest.com">
</a>

Ed25519 Receipt

Receipt ID: 2eceae55-b411-44b4-8ff2-3200ad992457
Output Hash: b47e33527d985c6cdf27ba55f08dddca7130b322d78c78137adddc7b4263ef2b
Signature: ed25519:33a27f056417c0d4728244fbaeca88df9c72433445873ffda491e132860009c5d08197ee67152cdd359afd1dd25806ef7d4298b4b418c7337434df8aa9070e0a
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/natwest.com