# barclaysiportalbanking.com: Recorded fraud and security help page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/barclaysiportalbanking.com/ Machine-readable companion: https://phishdestroy.io/domain/barclaysiportalbanking.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-08 14:31:41 UTC - Selected availability observation: 2026-11-05T17:01:54Z - Stored record updated: 2026-11-08 15:00:08 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): barclays ## Stored infrastructure - Observed IP address: 179.43.140.173 - Registrar in stored WHOIS data: Dominet (HK) Limited - Last stored HTTP status: 200 (observed: not recorded) - Registration date in stored WHOIS data: 2026-11-05 08:07:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1aca8-7f79-71fe-912c-c53cf10ba114/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/barclaysiportalbanking.com - Certificate Transparency search: https://crt.sh/?q=%25.barclaysiportalbanking.com - Web Archive lookup: https://web.archive.org/web/*/https://barclaysiportalbanking.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records barclaysiportalbanking.com showing a fraud and security help page with options to report scams, verify calls, chat, and send details. On 2026-11-05, barclaysiportalbanking.com redirected to barclaysiportalbanking.com/home/index.php, and the destination page displays a Barclays-branded fraud and security section headed "Fraud and security" with the tagline "Stay one step ahead of the criminals." The page notes that scammers change tactics often and offers buttons to report fraud or a scam and to see latest scams, alongside a shield graphic. Below, a "Ways to get help" section presents three cards: verify a call from Barclays, start a secure chat with a UK-based help team available 24 hours a day, and send details to report something noticed. Floating buttons for Verify Call, Live Chat, and Fraud Report appear at the lower right. Package revision: f50ec392848d20f73163e4541fe22dc17b453f5ecf6730a243569af1c9c5afa5 Text generated (not scan time): 2026-11-08 15:37:41 Reviewed evidence snapshot: {"domain":"barclaysiportalbanking.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"barclaysiportalbanking.com","final_host":"barclaysiportalbanking.com","redirects":[{"to":"https://barclaysiportalbanking.com/","from":"http://barclaysiportalbanking.com/","status":307},{"to":"https://barclaysiportalbanking.com/home/index.php","from":"https://barclaysiportalbanking.com/","status":302}],"captured_at":"2026-11-05T17:01:54.438000Z","uuid":"01a1aca8-7f79-71fe-912c-c53cf10ba114","report_url":"https://urlscan.io/result/01a1aca8-7f79-71fe-912c-c53cf10ba114/","sha256":"2e96533b65d030dfe06e39a6d1b2f79143d3d068bfdac0c8b3140a092e27c592","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal_public_summary":"","page_paragraph_target_characters":678} Source facts (timestamps as stored): {"record_id":1859864,"first_recorded_at":"2026-11-08 15:31:41","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":14,"suspicious":2,"vendors":{"CRDF":"malicious","ESET":"phishing","Ermes":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"spam","Webroot":"malicious","Emsisoft":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"suspicious","Kaspersky":"phishing","Seclookup":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"observed_at":"2026-11-07T13:10:36Z","checked_at":null,"fetched_at":"2026-11-08T14:37:52Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","Ermes","ESET","Emsisoft","Fortinet","G-Data","Kaspersky","Lionic","Netcraft","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-07 13:10:36","checked_at":"2026-11-08 15:37:52","fetched_at":"2026-11-08 14:37:53","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","ESET":"phishing","Ermes":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"spam","Webroot":"malicious","Emsisoft":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"suspicious","Kaspersky":"phishing","Seclookup":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"vendor_names":["CRDF","ESET","Ermes","VIPRE","G-Data","Lionic","Sophos","Webroot","Emsisoft","Fortinet","Netcraft","SOCRadar","Kaspersky","Seclookup","BitDefender","alphaMountain.ai"],"stats":{"timeout":0,"harmless":44,"malicious":14,"suspicious":2,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 15:35:02"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"URLScan","record_id":1859864,"scope":"checked_url","observed_at":"2026-11-05T17:01:54Z","http_status":200,"http_observed_at":"2026-11-05T17:01:54Z","stored_http_code":200,"stored_http_observed_at":null,"legacy_site_status":"unknown","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2","scan_uuid":"01a1aca8-7f79-71fe-912c-c53cf10ba114","fetched_at":"2026-11-08T14:36:27Z"}} ## Stored page captures - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1aca8-7f79-71fe-912c-c53cf10ba114.png Captured: 2026-11-05 17:01:54 UTC Source report: https://urlscan.io/result/01a1aca8-7f79-71fe-912c-c53cf10ba114/ SHA-256: 2e96533b65d030dfe06e39a6d1b2f79143d3d068bfdac0c8b3140a092e27c592 - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1aaf8-d167-7329-ac64-cca3125784b1.png Captured: 2026-11-05 09:10:01 UTC Source report: https://urlscan.io/result/01a1aaf8-d167-7329-ac64-cca3125784b1/ SHA-256: d4e78404ff6c8209824ac37b07effdedfd48d49ef87c16d0b2829acdc07cbeb4 - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1ab26-d2e7-726a-b3c9-48680f0d1810.png Captured: 2026-11-05 10:00:17 UTC Source report: https://urlscan.io/result/01a1ab26-d2e7-726a-b3c9-48680f0d1810/ SHA-256: 2605092d3d2d255b8dd594e52ebf7e809bf8f277bd6ac6beec91234563e51835 - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1ab39-19cf-743b-bd9e-7e5f3e1dbb2d.png Captured: 2026-11-05 10:20:15 UTC Source report: https://urlscan.io/result/01a1ab39-19cf-743b-bd9e-7e5f3e1dbb2d/ SHA-256: d4e78404ff6c8209824ac37b07effdedfd48d49ef87c16d0b2829acdc07cbeb4 - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1ac65-e143-7419-817a-291fe896f92c.png Captured: 2026-11-05 15:48:46 UTC Source report: https://urlscan.io/result/01a1ac65-e143-7419-817a-291fe896f92c/ SHA-256: d4e78404ff6c8209824ac37b07effdedfd48d49ef87c16d0b2829acdc07cbeb4 - URLScan · 2026-11-05: https://screenshots.phishdestroy.io/us/01a1ac6f-c367-75fa-925f-138a7aa0c45d.png Captured: 2026-11-05 15:59:34 UTC Source report: https://urlscan.io/result/01a1ac6f-c367-75fa-925f-138a7aa0c45d/ SHA-256: d4e78404ff6c8209824ac37b07effdedfd48d49ef87c16d0b2829acdc07cbeb4 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/59be33cd-b080-4717-bf18-841396df2901.png Captured: 2026-11-08 14:35:30 UTC Source report: https://radar.cloudflare.com/scan/59be33cd-b080-4717-bf18-841396df2901 SHA-256: d0d8025d764718ca90b01bfdf5ca1ded19add536aaae10e7b1f8f75cfe9af3a8 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-08T14:36:27Z", "uuid": "01a1aca8-7f79-71fe-912c-c53cf10ba114", "scanned_at": "2026-11-05T17:01:54Z", "final_url": "https://barclaysiportalbanking.com/home/index.php", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://barclaysiportalbanking.com/", "from": "http://barclaysiportalbanking.com/", "status": 307 }, { "to": "https://barclaysiportalbanking.com/home/index.php", "from": "https://barclaysiportalbanking.com/", "status": 302 } ], "ip": "179.43.149.133", "ptr": "hostedby.privatelayer.com", "ips": [ "179.43.149.133" ], "asns": [ "51852" ], "countries": [ "CH" ], "doc_hash": "96b2a3fa030129175e6a8c269ba23f4fe3e00dec9d3f3148e978ba52de2e4f7a", "script_hashes": [ "e3fb456a5a1b4bc7c5938b0e71257b3d6cda43326d5ddd71edecee090ab1135b" ], "globals": [ "_m", "openVM", "closeVM", "submitVC" ], "cookies": [ "PHPSESSID" ], "tls": { "san": [ "barclaysiportalbanking.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "barclaysiportalbanking.com", "protocol": "TLS 1.3", "valid_to": "2027-02-03T08:11:10Z", "valid_from": "2026-11-05T08:11:11Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 0, "tls_valid_days": 89, "requests": 10, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "barclays" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Barclays" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "Apache/2.4.52 (Ubuntu)", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer", "via": "1.1 Caddy\n1.1 Caddy" } }, "cf": { "v": 1, "fetched_at": "2026-11-08T14:36:29Z", "uuid": "59be33cd-b080-4717-bf18-841396df2901", "scanned_at": "2026-11-08T14:35:30Z", "final_url": "https://barclaysiportalbanking.com/", "status": 200, "history": [ { "url": "https://barclaysiportalbanking.com/", "status": 200 } ], "dom_hash": "434ac93310f86f4882948fa02ecdd3b1470d778b7f0753f6e1ee2e12bb1042a7", "doc_hash": "9133c2a6293122ee46b749147da853c831ae77d6071d6341cb12cb5c02310893", "phishing_v2": [ "phishing" ], "url_risks": [ "Phishing" ], "domain_risks": [ "Phishing", "Security threats", "Newly Seen Domains", "Security Risks", "New Domains", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.181" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.165" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.168" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.163" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.162" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.174" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.172" }, { "name": "barclaysiportalbanking.com", "type": "A", "value": "179.43.140.176" } ], "dnssec_valid": false, "ip": "127.0.1.3", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2026-11-05T09:07:06Z", "updated": "2026-11-05T09:07:06Z", "expires": "2027-11-05T09:07:06Z", "nameservers": [ "ns1.nsgriddns.com", "ns2.nsgriddns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-08T14:37:52Z", "analysis_at": "2026-11-07T13:10:36Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 2, "undetected": 32 }, "detections": { "CRDF": "malicious", "ESET": "phishing", "Ermes": "phishing", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "spam", "Webroot": "malicious", "Emsisoft": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "suspicious", "Kaspersky": "phishing", "Seclookup": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing, Spam, Newly Registered (alphaMountain.ai)" }, "registrar": "Dominet (HK) Limited", "created": "2026-11-05T09:07:06Z", "expires": "2027-11-05T09:07:06Z", "updated": "2026-11-05T09:07:06Z", "first_seen": "2026-11-05T09:45:57Z", "dns": [ { "ttl": 30, "type": "A", "value": "179.43.140.167" }, { "ttl": 30, "type": "A", "value": "179.43.140.166" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.nsgriddns.com", "value": "ns1.nsgriddns.com" }, { "ttl": 30, "type": "A", "value": "179.43.140.189" }, { "ttl": 30, "type": "A", "value": "179.43.140.180" }, { "ttl": 30, "type": "A", "value": "179.43.140.183" }, { "ttl": 30, "type": "A", "value": "179.43.140.181" }, { "ttl": 300, "type": "NS", "value": "ns1.nsgriddns.com" }, { "ttl": 30, "type": "A", "value": "179.43.140.177" }, { "ttl": 30, "type": "A", "value": "179.43.140.179" }, { "ttl": 300, "type": "NS", "value": "ns2.nsgriddns.com" } ], "dns_at": "2026-11-07T13:10:52Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "barclaysiportalbanking.com" ], "issuer": "Let's Encrypt / YE1", "serial": "5e5efb3f631351e9cb4fe5b18dd831d84a9", "sha256": "514b2420161c1c54f08a3bfed0d8546b334cf370dd39ca938f61c06f8414b072", "subject": "barclaysiportalbanking.com", "valid_to": "2027-02-03T08:11:10Z", "valid_from": "2026-11-05T08:11:11Z" }, "whois": { "registrar": "Dominet (HK) Limited", "registrar_iana_id": "3775", "registrar_url": "http://www.alibabacloud.com", "created": "2026-11-05T09:07:06Z", "updated": "2026-11-05T09:07:06Z", "expires": "2027-11-05T09:07:06Z", "status": [ "ok" ], "nameservers": [ "ns1.nsgriddns.com", "ns2.nsgriddns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2027-11-05T09:07:06Z", "registration": "2026-11-05T09:07:06Z", "registrar expiration": "2027-11-05T09:07:06Z", "last update of RDAP database": "2026-11-05T09:07:06Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-08T14:36:42Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-08T14:33:19Z", "first": "2026-11-08T14:33:19Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 6653 }, "trackers": { "requests": 26, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 102, "tls": 39, "wait": 1567, "connect": 34, "download": 0 }, "response_ms": 1742 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 53, 80, 443 ] }, "carbon": { "bytes": 13545, "co2_grams": 0.0005, "cleaner_than": 65 }, "dns_server": { "ns": [ { "ip": "179.43.140.162", "host": "ns1.nsgriddns.com" }, { "ip": "179.43.140.163", "host": "ns2.nsgriddns.com" } ], "zone": "barclaysiportalbanking.com" }, "location": { "ip": "179.43.140.171", "asn": "51852", "org": "Private Layer INC", "city": "Neerach", "country": "CH" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "barclaysiportalbanking.com" }, "dns": { "A": [ "179.43.140.166", "179.43.140.178", "179.43.140.189", "179.43.140.169", "179.43.140.183", "179.43.140.171", "179.43.140.184", "179.43.140.163" ], "NS": [ "ns2.nsgriddns.com", "ns1.nsgriddns.com" ], "SOA": "{\"nsname\": \"ns1.nsgriddns.com\", \"hostmaster\": \"hostmaster.nsgriddns.com\", \"serial\": 2026110701, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 30}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "179.43.140.169", "family": 4 }, "redirects": { "chain": [ "https://barclaysiportalbanking.com" ] }, "linked_pages": { "internal_count": 14 }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2026-11-05T09:07:06Z", "updated": "2026-11-05T09:07:06Z", "expires": "2027-11-05T09:07:06Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns1.nsgriddns.com", "ns2.nsgriddns.com" ] }, "headers": { "headers": { "server": "Apache/2.4.52 (Ubuntu)", "content-type": "text/html; charset=utf-8", "via": "1.1 Caddy, 1.1 Caddy" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1aca8-7f79-71fe-912c-c53cf10ba114.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1aca8-7f79-71fe-912c-c53cf10ba114/","captured_at":"2026-11-05T17:01:54Z","sha256":"2e96533b65d030dfe06e39a6d1b2f79143d3d068bfdac0c8b3140a092e27c592","model_image_sha256":"2c8bcfdcbbd32ba5ae8a66e07a658dafc5711b29c02534af68ecd3629ee06a58","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/barclaysiportalbanking.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "URLScan", "record_id": 1859864, "scope": "checked_url", "observed_at": "2026-11-05T17:01:54Z", "http_status": 200, "http_observed_at": "2026-11-05T17:01:54Z", "stored_http_code": 200, "stored_http_observed_at": null, "legacy_site_status": "unknown", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2", "scan_uuid": "01a1aca8-7f79-71fe-912c-c53cf10ba114", "fetched_at": "2026-11-08T14:36:27Z" } ```