Barclays

Banking United Kingdombarclays.co.ukRank 275 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
6
5 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
148
14 listed by a source or an address list
Official domains
24
verified from Barclays's own sites and records

Certificate findings for Barclays

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Barclays's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 12 findings, grouped by hostname

  1. barclaysnet-banking.com KN · AS402253 · SKN Subnet & Telecom Ltd6 addresses
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    barclaysnet-banking.com
    First seen
    2026-11-04 10:35 UTC
    First published
    2026-11-04 11:54 UTC
    DNS
    Resolves · checked 2026-11-04 12:10 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 104.251.181.83.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 104.251.181.83
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 09:26 UTC to 2027-02-02 09:26 UTC
    Logged 2026-11-04 10:25 UTC in Google PlumbersArms2027h1, entry 607,105,405
    SHA-256 7e9c89d2e594163312630c24a109fda406c63f3546fa73bdafda00524c6b8d6f
    Public key SHA-256 296bda80a515ae0bf9e930e98e1af9ae697128024f4df7137182a49f6e329002
    Brand
    Barclays
    Addresses
    104.251.181.83 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    104.251.181.84 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    104.251.181.87 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    104.251.181.93 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    104.251.181.94 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    104.251.181.95 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Domain
    barclaysnet-banking.com
    Registered
    2026-11-04 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:56 UTC

    Suggest a correction

  2. barclays-groups.com AE · AS60117 · HS Host Sailor Ltd
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as wellsfargo-ny.com, on a phishing host at 185.198.59.26MX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    barclays-groups.com
    First seen
    2026-11-02 10:21 UTC
    First published
    2026-11-02 10:48 UTC
    DNS
    Resolves · checked 2026-11-04 11:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.198.59.26.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.198.59.26
    4. Latest DNS check
    Same certificate
    Same certificate as wellsfargo-ny.com: on a phishing host at 185.198.59.26; a Wells Fargo lookalike
    Barclays appears in this hostname
    Resolved to 185.198.59.26, an address that hosted confirmed phishing
    Certificate c6449115771f95ea… · 3 domains on it · first seen 2026-11-02 10:22 UTC
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 09:19 UTC to 2027-01-31 09:19 UTC
    Logged 2026-11-02 10:18 UTC in Geomys Tuscolo2027h1, entry 443,817,593
    SHA-256 c6449115771f95ea82d33ca0a49eac6950837c0e26ac82c8c4ace6215a031880
    Public key SHA-256 c96647c01509ea4bb7f564bd5e791f3b3944d51298448741ebf6ee76bb0f1c81
    Brand
    Barclays
    Addresses
    185.198.59.26 · United Arab Emirates · AS60117 HS Host Sailor Ltd
    Domain
    barclays-groups.com
    Registered
    2026-03-10 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at barclays-groups.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  3. www.barclays.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 d ago
    DetailsHide
    Hostname
    www.barclays.site
    First seen
    2026-10-30 08:36 UTC
    First published
    2026-10-30 08:40 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 07:35 UTC to 2027-01-28 07:35 UTC
    Logged 2026-10-30 08:33 UTC in Google PlumbersArms2027h1, entry 520,300,203
    SHA-256 7e164d48ee4f82c41291104921450ccd731dc4c4ff259cea1aa4d35c545cb50c
    Public key SHA-256 316802fef92df3bf21e4fd019fe8bbbda05bb494099c1c1d871519e462f83c4b
    Brand
    Barclays
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    barclays.site
    Registered
    2026-10-30 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  4. barclays.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 6 d ago
    DetailsHide
    Hostname
    barclays.site
    First seen
    2026-10-30 08:36 UTC
    First published
    2026-10-30 08:40 UTC
    DNS
    Resolves · checked 2026-11-05 08:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 07:35 UTC to 2027-01-28 07:35 UTC
    Logged 2026-10-30 08:33 UTC in Google PlumbersArms2027h1, entry 520,300,203
    SHA-256 7e164d48ee4f82c41291104921450ccd731dc4c4ff259cea1aa4d35c545cb50c
    Public key SHA-256 316802fef92df3bf21e4fd019fe8bbbda05bb494099c1c1d871519e462f83c4b
    Brand
    Barclays
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    barclays.site
    Registered
    2026-10-30 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  5. www.barclays-jp.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    www.barclays-jp.com
    First seen
    2026-10-30 01:06 UTC
    First published
    2026-10-30 01:51 UTC
    DNS
    Resolves · checked 2026-11-05 02:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 00:02 UTC to 2027-01-28 00:02 UTC
    Logged 2026-10-30 01:00 UTC in Let's Encrypt Sycamore2027h1, entry 847,522,097
    SHA-256 753b0932c5f0b2eea5b648c7287e4b12b9ec0f2232cc61f57063af1dbcf34160
    Public key SHA-256 607a4624b8403a523d6199b02108f998940a23a43554a2f481c0cf73a887a400
    Brand
    Barclays
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    barclays-jp.com
    Registered
    2025-12-02 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  6. barclays-jp.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 11 mo ago
    DetailsHide
    Hostname
    barclays-jp.com
    First seen
    2026-10-30 01:06 UTC
    First published
    2026-10-30 01:51 UTC
    DNS
    Resolves · checked 2026-11-05 02:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 00:02 UTC to 2027-01-28 00:02 UTC
    Logged 2026-10-30 01:00 UTC in Let's Encrypt Sycamore2027h1, entry 847,522,097
    SHA-256 753b0932c5f0b2eea5b648c7287e4b12b9ec0f2232cc61f57063af1dbcf34160
    Public key SHA-256 607a4624b8403a523d6199b02108f998940a23a43554a2f481c0cf73a887a400
    Brand
    Barclays
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    barclays-jp.com
    Registered
    2025-12-02 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  7. m.barclays-nethelp.com PA · AS51852 · PLI-AS Private Layer INC
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    m.barclays-nethelp.com
    First seen
    2026-10-28 10:16 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-04 11:08 UTC
    Checks
    Overdue since 2026-10-29 11:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.43.175.13.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.43.175.13
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 179.43.175.13.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 179.43.175.13
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 09:13 UTC to 2027-01-26 09:13 UTC
    Logged 2026-10-28 10:11 UTC in IPng Networks Halloumi2027h1, entry 287,335,572
    SHA-256 4cb34ecf21f8755ac5af00687c146e9f418aacb213cebd16298e9778252d208f
    Public key SHA-256 23c5ad5c62d39d63539a18f97c0a72d2a36ffc9916e0a36a437e662535cf43fd
    Brand
    Barclays
    Addresses
    179.43.175.13 · Panama · AS51852 PLI-AS Private Layer INC
    Domain
    barclays-nethelp.com
    Registered
    2026-10-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  8. www.barclays-nethelp.com PA · AS51852 · PLI-AS Private Layer INC
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    www.barclays-nethelp.com
    First seen
    2026-10-28 10:11 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-04 11:08 UTC
    Checks
    Overdue since 2026-10-29 11:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.43.175.13.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.43.175.13
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 179.43.175.13.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 179.43.175.13
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 09:11 UTC to 2027-01-26 09:11 UTC
    Logged 2026-10-28 10:09 UTC in IPng Networks Gouda2027h1, entry 246,924,881
    SHA-256 2721fdf8951ac7469426c3e57c159cda99a4f89d0e6dc6b6fb7190e511c165c6
    Public key SHA-256 59a69028134aef08f558b368d2ba176f6dd27000704023f3f908743887f70b1b
    Brand
    Barclays
    Addresses
    179.43.175.13 · Panama · AS51852 PLI-AS Private Layer INC
    Domain
    barclays-nethelp.com
    Registered
    2026-10-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  9. barclays-nethelp.com PA · AS51852 · PLI-AS Private Layer INC
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 9 d ago
    DetailsHide
    Hostname
    barclays-nethelp.com
    First seen
    2026-10-28 10:11 UTC
    First published
    2026-10-28 11:02 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-04 11:08 UTC
    Checks
    Overdue since 2026-10-29 11:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.43.175.13.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.43.175.13
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 179.43.175.13.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 179.43.175.13
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 09:10 UTC to 2027-01-26 09:10 UTC
    Logged 2026-10-28 10:09 UTC in Let's Encrypt Willow2027h1, entry 812,766,614
    SHA-256 21c874e6952b5bfeac5357ffe041908f7eb7d72007874889f71f6228e5f15de1
    Public key SHA-256 8282e5a82c47a976d0d96387fc5a94cb06de91801df56a38a0e3c4a0dbd7c773
    Brand
    Barclays
    Addresses
    179.43.175.13 · Panama · AS51852 PLI-AS Private Layer INC
    Domain
    barclays-nethelp.com
    Registered
    2026-10-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Barclays when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Banking

All brands →