NatWest Group plc

Certificate domains matching this brand

Names identified in certificate logs that match this company or brand. A brand match does not indicate bad intent or malicious activity.

Generated spellings

Certificate names on a spelling we generate for this organization (typos, swapped letters, other endings).

Common brand names

The brand name appears in many certificates across all logs (20 to 200 domains in the last 30 days), so more of these matches are unrelated.

Collected from public certificate-transparency logs since 2026-10-18; 241,967,543 log entries checked so far. 80 logs are read continuously by our CT resolver from the point it started following them; earlier entries are not covered. Names on an organization's official domains are recorded by the resolver for at most 100 names per registrable domain per day, so official-domain name and certificate counts are lower bounds. Times are CT log timestamps, which differ from certificate validity dates. Certificate counts include precertificates and final certificates as separate artifacts. The "Source-reported abuse" badge appears only when an independent source reported that exact name for this organization; a certificate name match never creates it, and "No report in sample coverage" is not a safety verdict. Lookalike domains first seen in the last 7 days are checked in DNS (addresses, name servers and MX of the registrable domain), except names on switched-off tokens; a domain that resolves or publishes MX also gets a mail check (MX, SPF, DMARC). Most certificate names resolve, because issuing a certificate usually requires it; a resolving domain is not evidence of abuse. Mail records show the domain can send or receive mail; they do not show who operates it. A red MX or SPF chip names the IP list an address behind the record is on (the MX host's address, or an SPF ip4 range of the record or of the services it includes), checked at page view against the lists approved for display. Mail providers and sending services are shared, so a listing says nothing about who operates the domain. How CT works