Domain Due Diligence
Report for Nab.com.au
Why we think so?
nab.com.au is the official website of National Australia Bank (NAB), one of Australia's largest banks. It receives over 11 million visits per month, primarily from Australian users, reflecting its major presence in the finance and banking sector. The site employs robust technologies and security measures, including DigiCert Extended Validation SSL and reputable content delivery networks. NAB openly warns customers about numerous scams impersonating it but maintains secure core systems. The bank has faced significant legal and regulatory challenges related to customer service and compliance, yet these do not indicate the site itself is fraudulent.
Risk Insights
Strong Verification and Security
- Uses Extended Validation SSL certificate
- Hosted on reputable CDN and cloud services
- Multiple domain verifications and TXT records present
High User Engagement
- Over 11 million monthly visits
- Low bounce rate (~16%)
- Average session duration over 6 minutes
Scam Awareness and Impersonation Risks
- Numerous reported phishing scams impersonating NAB
- NAB issues regular scam alerts to customers
- Protective measures like payment blocking implemented
Contradictory Signals
While the domain is authentic and secure, the company has reputational and compliance challenges.
Signal A: Official site has strong SSL and traffic signals
Signal B: NAB faces multiple legal complaints and reputation issues
Category Scores
Red Flags & Warnings
- Significant number of scams impersonating NAB reported, posing risk to customers.
- NAB has experienced legal actions and penalties due to customer service and compliance failures.
🔎 Detailed Checks & Analysis
Domain Metadata Check
Score: 95/100
Domain Metadata Check
"The domain's use of reputable infrastructure and high monthly visits supports legitimacy."
Reason: nab.com.au is a highly ranked domain with authentic traffic mainly from Australia, consistent with a major bank.
Security and Infrastructure Check
Score: 90/100
Security and Infrastructure Check
"Strong security certificates help prevent phishing and protect users."
Reason: The domain uses Extended Validation SSL and reliable hosting technologies such as Akamai and Microsoft, ensuring secure connections.
Blacklist and Scam Presence Check
Score: 92/100
Blacklist and Scam Presence Check
"Absence from major scam lists indicates low risk of domain fraud."
Reason: No blacklisting or phishing threats detected on Google Safe Browsing or crypto scam blacklists for nab.com.au.
Reputation and Reviews Check
Score: 80/100
Reputation and Reviews Check
"Careful differentiation of impersonation scams from the official site is critical."
Reason: Customer complaints mostly relate to service or disputes but do not confirm the domain itself as fraudulent; phishing scams impersonate NAB instead.
Legal and Compliance Check
Score: 70/100
Legal and Compliance Check
"While serious, these issues do not confirm fraudulent operation of nab.com.au's website."
Reason: NAB has faced significant legal and regulatory actions for compliance failures and misconduct, which may impact reputation.
Your Next Steps
-
1
Always access NAB services directly via nab.com.au or official NAB apps to avoid phishing scams.
-
2
Stay informed about common scam tactics impersonating NAB by reviewing official security alerts on nab.com.au.
-
3
Report any suspicious emails, messages, or calls claiming to be from NAB to the bank's official channels immediately.
-
4
Verify contacts and phone numbers used to communicate with NAB customers through the official website or trusted resources.
Evidence & Citations
-
NAB latest fraud scam alerts
Official NAB warnings about fraud attempts impersonating the bank.
-
NAB pays penalties for Consumer Data Right breaches
Regulatory penalty for data compliance failures.
-
NAB payment alerts effectiveness
Evidence of protective measures reducing scam payment losses.
🕵🏻 Keep investigating
Run another instant due diligence scan on any website URL. Verify before you trust!
Spot fake SaaS login pages before handing over credentialsPhishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...
Read playbook → Analyze giveaway landing page phishingGiveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...
Read playbook →Community feedback
Not rated yet
0 reviews published
Leave a review
Reviews
No public reviews yet. Be the first to share your experience.