{"report_id":"3aee0802-d4b9-44f3-865e-0a32b8db83ec","version":6,"status":"done","tags":[],"date":"2026-05-22T04:52:41Z","url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"title":"Loading...","dom":{"size":120777,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4ce02766bf3032a757b526f2b323bba","sha1":"318b1e1d70b30215d2909d38a3873ec0efe23b14","sha256":"b4de3d53f06c7ba797b773c57589435aff825ca17fe3b589ea39d2d013fa6316","sha512":"0effe962b5d7c43580a65b334248505b97749ffa2711dafb1e688ec2ba46c4f203c0851fa667fe3978b3772841d9630fb484dc8239c3342b86ef540762b17f77","ssdeep":"3072:qrgU+BE6bDNPsIQu6Zh9X7qUI7JXI0+LF:qkBrX1sBZh9X7qUH","tlshash":"57c35b3025cc1d3e1207038771653aa9207fde70ed269556f5b3427aa2d3d86ab1e2af","dom_hash":"domhash38dc1189d65ca2485ef2814755dbb583","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-26T04:52:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"barclaysnetfraudhub.com","ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-05-22T04:52:43.370436Z","last_seen":"2026-05-22T04:52:43.370436Z","alert_count":66,"request_count":11,"received_data":1522588,"sent_data":5150,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-17T22:36:28.748469Z","alert_count":0,"request_count":1,"received_data":61830,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"cac495225c012dffdd52efaff4cc0355","sha1":"4ee719fda6abcaa174e76cd0f77260ffd6875169","sha256":"63a874dc1a6a79bc695eb35b9b4813ba84f94d013748d5c4cf0fd27e5d2dbc6e","sha512":"d04985354a2d0e5513a1607200916265966d75080f0e028a573731768d7ca07c4659e6b491222a003a4d685c87b9619a420daf8458b9d9d9893803c3bf6068e7","ssdeep":"1536:aVqkFcHovjAoQ1ipCO+BOp6H7PLf+aJPoQ8IQK4YoF7g:0rgU+BE6bDNPsIQu6U","tlshash":"3d63022d3c949ce5324de328668f95f8759220921cc6cd7c8197de6d78b2f0f21a7295","size":69017,"data":"","first_seen":"2026-05-21T04:58:45.490387Z","last_seen":"2026-05-22T04:52:47.372212Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63cf81d930655e0c04d2bf15c067042","sha1":"548408a22f6d80b3512f943fd7a3046c21f36be7","sha256":"76b14281a4e1d04d64924e30ac64b2f3af1a5b96dba2078734d989ef5bd1c88b","sha512":"00d01a6aa723af023ff385a27e053e045718b362c804574b5cd64e08ffcdea1e6f25d82fd7f62ec391f7acd8954dbf125cdb6bd167da880879f0d690bc4c1a9e","ssdeep":"","tlshash":"ee7129e3f0975a3029ef59bf24fe4b497471e408ed4652445c2c483ac429ed6ec3bae8","size":3502,"data":"","first_seen":"2026-05-21T04:58:45.489136Z","last_seen":"2026-05-22T04:52:47.372874Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-25T05:39:23.506067Z","times_seen":31765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"aef85a7bd61e9e81330ef911698ba865","sha1":"9a45651179cebd2e2754f13a6b60d5d36ddacb4d","sha256":"918778feaf0b50c1577bf11dfa79d47089004c9c55b292a8f327563e73d6c308","sha512":"58e7c832692e6268e96178aca00c7b92b0c3622b330a5a73c05ca5318246b1eec52ab40c6aa674f5061b7cf64979713f537b9d272f60d28afad1000b902cfecd","ssdeep":"768:Th92/5A7Pr2mVvf5eJ69pPIUPlLI95eQsba6OUL7JXI0+LF:Th9mdkvRmG7JXI0+LF","tlshash":"8e332e3062cc1d3f1117038771753aa960bfde30ea265146b5b742a6a3d3d85eb1e2af","size":51165,"data":"","first_seen":"2026-05-21T04:58:45.491714Z","last_seen":"2026-05-22T04:52:47.373777Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img0.ico","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img0.ico HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"858-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2136,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"83ef20086a2776e71324887d4f0ee5a8","sha1":"101d6a4f3f3b2c65b4d70b88c85cadbae3c09383","sha256":"7fda4a49d5ab5400152fad9456827b7d84bfa9e82a5d78824732486818e66955","sha512":"6deb45d1b6841900eb465b05d2fe2935f235044b4037b237f4a5525dd287dc3cb4c1d6b4e09e0ea5eeebc71484be1fbfd964c21f45fd50a72fb65324fec1aebc","ssdeep":"","tlshash":"8141b75db421ac81670eae646edc41576b7b6ac0cb8298c7bddd8c0b65600f9d80e3c3","first_seen":"2023-06-25T19:10:48Z","last_seen":"2026-07-20T14:55:26.859506Z","times_seen":136,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 561530\r\nexpires: Wed, 12 May 2027 04:52:19 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dkpk4x4nYIuRNLfecyFYTB4tLm1ErReLTNs9OyH9DT3Y0Or6L97E%2BGPDoHWqmwT864TtdcOfu0LOc4aAdkXZ1csHrdB2D1sly%2FWO7PZQaeuGiGXn07BLEGJZe6OPBBgKO7tiIEXt\"}]}\r\ncf-ray: 9ff935f48e65b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-25T05:39:23.506067Z","times_seen":31765,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img4.png","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img4.png HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"cfd2-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 53202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":53202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 432, 8-bit colormap, non-interlaced","md5":"72831e7f533d44a0f18fe107dff19d1f","sha1":"63d780845fec4e4b9e6f000184d5f2abe14ff832","sha256":"b349701a91ae344bf2963297ba8bafdc9e58eb1802aa23d525630c85bdf3ddc0","sha512":"a784530fab2f1d0786f71637e1075fca73c13b699e02bb117df3ad5b75a3c3182542c253ef200bed07069c713e1542030cccd1a9b2de9bb0c8f0e3eba8ed78d5","ssdeep":"1536:XjXAIIAzg3CsPLzmUvSUopPLrSnGPfarLpHX:XjDzGXfmfUIPSnGHarLpHX","tlshash":"9433f12ab8b43172ec0f587f82ca24ed56f822477702364d218ab4d26e4ad745f9971f","first_seen":"2026-04-13T09:49:23.626191Z","last_seen":"2026-05-22T04:52:47.362187Z","times_seen":6,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img5.png","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img5.png HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"24b88-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 150408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":150408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 432, 8-bit/color RGBA, non-interlaced","md5":"5aa109e27ff74367de66ae1796518dac","sha1":"9f6e1c8b045956f6fa105aab810bd64092707393","sha256":"69f65123a22ac860a6d234d778278a2282bab8e9ce7eb03021ad8a836740a798","sha512":"3c1c165875dc308bee5c4579cb8c8620bc967e121f71cdfaa40e4b052155b95118a2ccd861dbf371f8fea67174201df161b4085d0503d334a91a0328350b9b9f","ssdeep":"3072:rvU6BosHF8fMCd0HBs0/Se8r9ZW2HUmImS9:rv/+sSECd0HCzNImS9","tlshash":"25e31243136370ad0f8d2725b81e0375d3c3de38e56460c999cc1a95d24eaadb0aabf5","first_seen":"2026-04-13T09:49:23.64303Z","last_seen":"2026-05-22T04:52:47.363189Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img8.jpg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img8.jpg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"48f5-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 18677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18677,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x576, components 3","md5":"104127b7f8bd5253ddf6dcdff3ad2441","sha1":"7b0575af5b6b41bb08db235dd26944d15d3d770b","sha256":"324a0af034d4d4848161632167e8ffa8b043dcfbf2d49fbe5a7f8e89feeba7b5","sha512":"b0e5069bd959ce8d32d8a23ea24ba695fa17ffb2ee98a001e70cf3fc6b145ae76dd44d1037cd0cb0ae311c9280978987e8ea5c56f4e826bd2c56112164574b9a","ssdeep":"384:2aLZcIRaMQhUlMZinWD6AVSvwtWHajbw9:2aL7FlWDBtWx","tlshash":"38821b175948db82a43996e4be031f5c5f4b3f4da89239ef10230e8f3e346664c9d56e","first_seen":"2026-04-13T09:49:23.635903Z","last_seen":"2026-05-22T04:52:47.363978Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/index.php","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T04:52:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/index.php HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\nexpires: 0\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nset-cookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile; path=/\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 69704\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":69704,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"afbc2789bd3700aed8222016f42214e9","sha1":"048f27395340b1277d7a2af5b77b6e88739224f7","sha256":"631102da60231b729c54092882b6d617bbea12d451c5e084ba198fa15f3e3fdb","sha512":"e02d0a9d92a66aa75738bbc5e6f0d298a754075056ba255a8d88605203709b473c99ca251d983a691a97c40cdb55d1cd9eecfb57563f36e3568cf459b0796e6f","ssdeep":"1536:qVqkFcHovjAoQ1ipCO+BOp6H7PLf+aJPoQ8IQK4YoF7P:ErgU+BE6bDNPsIQu6j","tlshash":"0163022e3c94ace5324de32836cf95e8759620921cc7cd7c8197de6d68a2f0f20a6295","first_seen":"2026-05-21T04:58:45.469413Z","last_seen":"2026-05-22T04:52:47.365012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":200,"dns":136,"connect":30,"send":0,"wait":44,"receive":61,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/style.css","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/style.css HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"111ecb-64abb93b95380-gzip\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1121995\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1121995,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65420)","md5":"cadb9f279dbf9dbcc1cf48bb7e2827e9","sha1":"d8f6376bfd1e00505e9780c13e01f4107677d325","sha256":"14dec1cd6d94a0f7d968092a4f41ad97db9c9da28e3c96a965fa267e144d26e3","sha512":"c75e15a2cca0807d8d39826a4350e02625aa5680a33d799973fa464a2c344a63574d96ac94c49c8e8d5b629228761340c1f2a2a959f864211e6bc7f1fe67aee5","ssdeep":"12288:kAyc10/4wwm3KaXYuieGrtbl0yQNmAYDQAYpDibCk972MJ2z:v0/4W3KaX5ieGrx+y8DibCkhJ2z","tlshash":"16257d34a931212db027822be0927a9d1324550aef6f47fbfba6523ec7ca1c61573d4d","first_seen":"2026-04-13T09:49:23.666011Z","last_seen":"2026-05-22T04:52:47.365684Z","times_seen":6,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img1.svg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img1.svg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/svg+xml\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"da5-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 3493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b16927373f476c2b9393d313279abc32","sha1":"42f18ad842131526f23847f1b14f8769de928f81","sha256":"5c3642c47273bc0fc999c3f35f32255f14530aea6f6f9ce8d4c25afcefabd93b","sha512":"dcf9ce4462214417b452f41ff4c2dfb9adab9b128ece48d43d8c2777cece9e270303903bdb0e7adf8599d711fdef07d1b10c1049d54dcbbdbd8dd357f525ab25","ssdeep":"","tlshash":"a871624b837c567d7de205548da421e23bd4a0dab1b4e2ccd7bbb953b44abf08124a7c","first_seen":"2023-07-21T07:55:55Z","last_seen":"2026-07-20T14:55:26.862712Z","times_seen":37,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img2.svg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img2.svg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/svg+xml\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"1081-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"601510338acc2f13c245d22cc1c4616d","sha1":"db0305c8d94d29f4e3e8eceaeda88a4a248848a1","sha256":"a7ccb95b549ab5c5699e921655d2f83a8aa9f83f234000a6146a4c33657f1385","sha512":"04c422bad44f1869f3cc318a27e15c1c9cc7b1e82fdb0a902d211370586b13a8b8e03edc076da8e0104328213c4078bdb1d6bc2db91e9c899c6af8286f95e054","ssdeep":"96:W8fiqdczJFi9UyEGZjOwOSmsQHPLSZE9z1euUcgyw:liqqzgZOVsQjSUz1bUFyw","tlshash":"e1916052973993fcad420b0d828065463a99245e703ad2ecdd6f875378a96f0803ccba","first_seen":"2023-07-21T07:55:55Z","last_seen":"2026-07-20T14:55:26.890552Z","times_seen":37,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img3.jpg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img3.jpg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"9e44-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 40516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x640, components 3","md5":"91b288ca828edb959dc8f6ebea3a8689","sha1":"c9752e183ee2ff8e9793301fdf4bdf42dc564e4d","sha256":"cc305a06614a259cac9c945da6c834636d928953d22d255bef6700cef1b3be27","sha512":"03eb1a4efa100dcaae9ed60915642e5af9d44eb83edac5419f4c048a376722d993b9b24ebae47fb2e0df18fad06d38f77db376f470bb773458f3bdf3e1e7094d","ssdeep":"768:0AP+CqpBQCXNNEaGuka9gKbGKKDpiqOz8RpfWBpzW3M:0APkBLXFG+7CrvOAnfik8","tlshash":"f403df5798094ad3e02d97e8be074eed2f192b48f4973eff50621fd67a212270c5e069","first_seen":"2026-04-13T09:49:23.670255Z","last_seen":"2026-05-22T04:52:47.370228Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img6.jpg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img6.jpg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"8091-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 32913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":32913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x576, components 3","md5":"4a426c7912ee2622c5ea55ac39f94343","sha1":"dc598318558367d91a42c9c92ab9e3ae3600614c","sha256":"5690f29c258ca1cac658ca1ddd262a356890d3348184984eb155b752c018fcea","sha512":"554de8c1ba7fb2de57ce1a6b46a5d89f0b335a5d8e68cec0424a302e842b2d709e06cf9b0776d1e5f6d741d706a2eed897e18cab7e132f2ea14d38858d580519","ssdeep":"768:2aSYEb/RGk7fTEJrE4i/1mHfWnpYwGmu2o:2aSbR7fIV0/1m/Wn9Gm2","tlshash":"5de249039d598b87043983e87e131fad2f0a3f0d98953aef44264ecb7e746664d8e50e","first_seen":"2026-04-13T09:49:23.645674Z","last_seen":"2026-05-22T04:52:47.370912Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barclaysnetfraudhub.com/home/assets/img7.jpg","fqdn":"barclaysnetfraudhub.com","domain":"barclaysnetfraudhub.com","tld":"com"},"ip":{"addr":"31.7.61.48","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://barclaysnetfraudhub.com/home/index.php","date":"2026-05-22T04:52:19.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barclaysnetfraudhub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 10:44:38 GMT","end":"Tue, 18 Aug 2026 10:44:37 GMT"},"fingerprint":{"sha1":"84:B6:66:92:73:D9:4E:2B:D8:32:8C:15:D3:CD:2B:13:9A:05:5C:DE","sha256":"32:42:B8:1B:57:7C:DF:7E:AF:E9:EB:96:6F:2F:35:10:FB:DB:30:02:00:EC:55:25:DB:26:51:42:DF:02:0E:ED"}}},"request":{"raw":"GET /home/assets/img7.jpg HTTP/1.1\r\nHost: barclaysnetfraudhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8jjahqlg2fp8dcga1j40qpfile\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\ndate: Fri, 22 May 2026 04:52:19 GMT\r\netag: \"5118-64abb93b95380\"\r\nlast-modified: Fri, 13 Feb 2026 21:49:18 GMT\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.52 (Ubuntu)\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 20760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x432, components 3","md5":"37072fff82040e3096afea08a589deee","sha1":"83efaa772c6cf625524fbb6955b0a0c0833183c6","sha256":"33a9c5a700577086b3a6d2c59d6cf11f599257e3a38cf18606db1f6b225bc9f2","sha512":"d550e75f9c95f9f0fe26d3da6a8c75d593ac7042adf72f2abffcf48602c80f442de6aab0beeac1450675fc2310d384bc520b6fc4f592147c406a0aeb088656bb","ssdeep":"384:d0Q1NSStRPknTsvaAhnuuVFHhvwzQly74RX/Cm4Wy:dztRwTlARr7Bv8s8cXOB","tlshash":"8292b257a9119f83f438d3a9be570b5c2b4a3e19f98336ff14221dc63a306651c8e43a","first_seen":"2026-04-13T09:49:23.629668Z","last_seen":"2026-05-22T04:52:47.371572Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"barclaysnetfraudhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"barclaysnetfraudhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}