owgirisleri[.]net

This domain is flagged as an elevated-risk brand impersonation threat targeting Barclays, a major financial institution. The site was designed to mimic legitimate Barclays login or customer service portals, likely aiming to harvest credentials, personal data, or facilitate unauthorized transactions. Brand impersonation of this nature is a common tactic in financial fraud campaigns, often leveraging urgency or fear to manipulate victims into disclosing sensitive information. Analysis indicates the domain owgirisleri.net was registered on February 21, 2026, through Internet Domain Service BS Corp, a registrar frequently associated with malicious infrastructure. It resolved to the IP address 91.92.240.61, hosted under AS202412 (Omegatech LTD) in Germany. At the time of assessment, 22 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on one security blocklist and was proactively blocked by at least one threat intelligence feed. The SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its free and automated nature. The page title, 'Sorry, the website has been stopped,' suggests the site was taken offline either by the operator or as a result of enforcement action. Organizations and users are advised to implement the following mitigation measures specific to brand impersonation threats. First, block the domain owgirisleri.net and its associated IP address 91.92.240.61 at the network perimeter to prevent access. Second, monitor for any attempts to access this domain or related infrastructure, as this may indicate compromised endpoints or insider threats. Third, deploy email filtering rules to quarantine messages containing the domain or references to Barclays that originate from untrusted sources. Fourth, educate users on recognizing brand impersonation tactics, such as spoofed login pages, urgent requests for account verification, or mismatched URLs. Finally, verify the legitimacy of any communication claiming to be from Barclays by contacting the institution through official channels, and report suspected phishing attempts to the brand’s security team for further investigation.