New Registrations

Barclays phishing domains

Newly registered lookalikes - tracked daily


Barclays phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
14
New (24h)
6
vs avg
About
AIUK retail and business banking phishing. Credentials, OTP capture, and second-factor-bypass pages are the recurring pattern.
TLDs
.com (12) · .bar (1) · .help (1)
Countries
United StatesUnited States (8) · SwitzerlandSwitzerland (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-05-20 00:43 2026-05-20 00:43
https://barclaysreportingfraud.com
Screenshot of barclaysreportingfraud.com Details
2026-05-20 00:43 2026-05-20 00:43
https://barclaysreportfraud.com
Screenshot of barclaysreportfraud.com Details
2026-05-20 00:42 2026-05-20 00:42
https://barclaysnetfraud.com
Screenshot of barclaysnetfraud.com Details
2026-05-20 00:42 2026-05-20 00:42
https://barclaysmenkulyatirim.com
Screenshot of barclaysmenkulyatirim.com Details
2026-05-20 00:41 2026-05-20 00:41
https://barclaysmenkulhaber.com
Screenshot of barclaysmenkulhaber.com Details
2026-05-20 00:41 2026-05-20 00:41
https://barclays-group.com
Screenshot of barclays-group.com Details
2026-05-19 00:36 2026-05-19 00:36
https://barclaystone.bar
Screenshot of barclaystone.bar Details
2026-05-18 00:37 2026-05-18 00:37
https://barclaysman.com
Screenshot of barclaysman.com Details
2026-05-17 00:45 2026-05-17 00:45
https://barclaysroofing.com
Screenshot of barclaysroofing.com Details
2026-05-17 00:45 2026-05-17 00:45
https://barclaysmen.com
Screenshot of barclaysmen.com Details
2026-05-17 00:45 2026-05-17 00:45
https://barclaysinvestigation.com
Screenshot of barclaysinvestigation.com Details
2026-05-15 00:37 2026-05-15 00:37
https://barclays-london.com
Screenshot of barclays-london.com Details
2026-05-14 00:36 2026-05-14 00:36
https://barclayspersonalonline.com
Screenshot of barclayspersonalonline.com Details
2026-05-14 00:36 2026-05-14 00:36
https://barclays-finance.help
Screenshot of barclays-finance.help Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://barclaysreportingfrau…
Screenshot of barclaysreportingfraud.com Details
https://barclaysreportfraud.c…
Screenshot of barclaysreportfraud.com Details
https://barclaysnetfraud.com
Screenshot of barclaysnetfraud.com Details
https://barclaysmenkulyatirim…
Screenshot of barclaysmenkulyatirim.com Details
https://barclaysmenkulhaber.c…
Screenshot of barclaysmenkulhaber.com Details
https://barclays-group.com
Screenshot of barclays-group.com Details
https://barclaystone.bar
Screenshot of barclaystone.bar Details
https://barclaysman.com
Screenshot of barclaysman.com Details
https://barclaysroofing.com
Screenshot of barclaysroofing.com Details
https://barclaysmen.com
Screenshot of barclaysmen.com Details
https://barclaysinvestigation…
Screenshot of barclaysinvestigation.com Details
https://barclays-london.com
Screenshot of barclays-london.com Details
https://barclayspersonalonlin…
Screenshot of barclayspersonalonline.com Details
https://barclays-finance.help
Screenshot of barclays-finance.help Details

AIHow to verify a real Barclays URL

  • Legitimate Barclays URLs always end in barclays.co.uk (e.g. www.barclays.co.uk, account.barclays.co.uk). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Barclays.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Barclays has owned barclays.co.uk for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open barclays.co.uk from your browser bookmark or type the domain manually.
  • Real Barclays pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.