Phishing sites impersonating Hsbc

PhishDestroy has recorded 21 phishing domains impersonating Hsbc since 2025-12-12, 1 of them in the last 30 days. The most used registrars are GoDaddy.com and Cloudflare; the most common TLDs are .com and .org. Open Hsbc only from its official app or a saved bookmark.

21
Domains, all time
1
Last 30 days
13
Online at last check
2
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 12026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 12026-09-06: 02026-09-07: 12026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 12026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 12026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Hsbc phishing domains detected per day: 6 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Hsbc site

Words most often added to the brand in reported domains: sogo, bdgdhsgj, duckdns, tkbww, cloudfront, hsbcoffshorebank, axa, cotizador, autos, priiphub.

  • Type the address yourself or use a bookmark; phishing links for Hsbc arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Hsbc does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Hsbc phishing domains

The 21 most recently detected domains impersonating Hsbc
DomainFirst detectedStatus at last checkRegistrar
interact-labs.com2026-10-10OnlineCloudflare
hsbcpress.com2026-09-12OnlineWild West Domains
hsbc.dev2026-09-07OnlineSquarespace Domains II
hsbcbankuk.ws2026-09-05Online—
hsbc.performind.com2026-08-26OnlineGoDaddy.com
mobilehsbccprivateonline.com2026-08-15OfflineCosmotown
empresas-hsbc.com2026-07-18OfflineDynadot
disabilityinclusionindia.org2026-07-16OnlineGoDaddy.com
fintech-l4pi.vercel.app2026-07-02OnlineVercel
jbfurnishing7-sketch.github.io2026-06-21OfflineGitHub
bdod739-spec.github.io2026-04-24Taken downGitHub
usa-hsbc.blogspot.com2026-03-31OfflineGoogle Blogger
globalxcfd.com2026-03-18OnlineUltahost
hsbcbnks.weebly.com2026-03-16OfflineSafenames
jsophielombard.pages.dev2026-02-26OfflineCloudflare
app-hsbc.priiphub.com2026-02-26OnlineGoDaddy.com
axa-cotizador-autos.web.app2026-02-26OnlineGoogle (Firebase)
app.hsbcoffshorebank.com2026-01-05OfflineCNOBIN INFORMATION TECHNOLOGY
di6y7cb0tkbww.cloudfront.net2025-12-18OnlineMarkMonitor
bdgdhsgj.duckdns.org2025-12-16Taken downGandi
sogo-hk.com2025-12-12OnlineNameCheap

All 21 Hsbc reports

Where they are registered and hosted

Registrars

  1. GoDaddy.com3
  2. Cloudflare2
  3. GitHub2
  4. NameCheap1
  5. Gandi1
  6. MarkMonitor1
  7. CNOBIN INFORMATION TECHNOLOGY1
  8. Google (Firebase)1

Top-level domains

  1. .com11
  2. .org2
  3. .app2
  4. .dev2
  5. .io2
  6. .net1
  7. .ws1

Hosting networks

  1. Cloudflare, Inc.3
  2. CLOUDFLARENET, US2
  3. FASTLY - Fastly, Inc., US2
  4. AS-COLOCROSSING, US1
  5. AMAZON-02, US1
  6. RAILNET Railnet LLC, US1
  7. COREIX-UK-AS Coreix Ltd, GB1
  8. WEEBLY - Weebly, Inc., US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Hsbc; share of all PhishDestroy reports: 0.01%.