# Phishing sites impersonating Hsbc PhishDestroy has recorded 21 phishing domains impersonating Hsbc since 2025-12-12, 1 of them in the last 30 days. The most used registrars are GoDaddy.com and Cloudflare; the most common TLDs are .com and .org. Open Hsbc only from its official app or a saved bookmark. 21Domains, all time 1Last 30 days 13Online at last check 2Confirmed takedowns ## New domains in the last 90 days Hsbc phishing domains detected per day: 6 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Hsbc site Words most often added to the brand in reported domains: sogo, bdgdhsgj, duckdns, tkbww, cloudfront, hsbcoffshorebank, axa, cotizador, autos, priiphub. - Type the address yourself or use a bookmark; phishing links for Hsbc arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Hsbc does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Hsbc phishing domains The 21 most recently detected domains impersonating Hsbc Domain | First detected | Status at last check | Registrar | [interact-labs.com](https://phishdestroy.io/domain/interact-labs.com/) | 2026-10-10 | Online | Cloudflare | [hsbcpress.com](https://phishdestroy.io/domain/hsbcpress.com/) | 2026-09-12 | Online | Wild West Domains | [hsbc.dev](https://phishdestroy.io/domain/hsbc.dev/) | 2026-09-07 | Online | Squarespace Domains II | [hsbcbankuk.ws](https://phishdestroy.io/domain/hsbcbankuk.ws/) | 2026-09-05 | Online | — | [hsbc.performind.com](https://phishdestroy.io/domain/hsbc.performind.com/) | 2026-08-26 | Online | GoDaddy.com | [mobilehsbccprivateonline.com](https://phishdestroy.io/domain/mobilehsbccprivateonline.com/) | 2026-08-15 | Offline | Cosmotown | [empresas-hsbc.com](https://phishdestroy.io/domain/empresas-hsbc.com/) | 2026-07-18 | Offline | Dynadot | [disabilityinclusionindia.org](https://phishdestroy.io/domain/disabilityinclusionindia.org/) | 2026-07-16 | Online | GoDaddy.com | [fintech-l4pi.vercel.app](https://phishdestroy.io/domain/fintech-l4pi.vercel.app/) | 2026-07-02 | Online | Vercel | [jbfurnishing7-sketch.github.io](https://phishdestroy.io/domain/jbfurnishing7-sketch.github.io/) | 2026-06-21 | Offline | GitHub | [bdod739-spec.github.io](https://phishdestroy.io/domain/bdod739-spec.github.io/) | 2026-04-24 | Taken down | GitHub | [usa-hsbc.blogspot.com](https://phishdestroy.io/domain/usa-hsbc.blogspot.com/) | 2026-03-31 | Offline | Google Blogger | [globalxcfd.com](https://phishdestroy.io/domain/globalxcfd.com/) | 2026-03-18 | Online | Ultahost | [hsbcbnks.weebly.com](https://phishdestroy.io/domain/hsbcbnks.weebly.com/) | 2026-03-16 | Offline | Safenames | [jsophielombard.pages.dev](https://phishdestroy.io/domain/jsophielombard.pages.dev/) | 2026-02-26 | Offline | Cloudflare | [app-hsbc.priiphub.com](https://phishdestroy.io/domain/app-hsbc.priiphub.com/) | 2026-02-26 | Online | GoDaddy.com | [axa-cotizador-autos.web.app](https://phishdestroy.io/domain/axa-cotizador-autos.web.app/) | 2026-02-26 | Online | Google (Firebase) | [app.hsbcoffshorebank.com](https://phishdestroy.io/domain/app.hsbcoffshorebank.com/) | 2026-01-05 | Offline | CNOBIN INFORMATION TECHNOLOGY | [di6y7cb0tkbww.cloudfront.net](https://phishdestroy.io/domain/di6y7cb0tkbww.cloudfront.net/) | 2025-12-18 | Online | MarkMonitor | [bdgdhsgj.duckdns.org](https://phishdestroy.io/domain/bdgdhsgj.duckdns.org/) | 2025-12-16 | Taken down | Gandi | [sogo-hk.com](https://phishdestroy.io/domain/sogo-hk.com/) | 2025-12-12 | Online | NameCheap | [All 21 Hsbc reports](https://phishdestroy.io/domain/?brand=Hsbc) ## Where they are registered and hosted ### Registrars - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)3 - Cloudflare2 - GitHub2 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)1 - [Gandi](https://phishdestroy.io/registrar/gandi-sas/)1 - [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)1 - [CNOBIN INFORMATION TECHNOLOGY](https://phishdestroy.io/registrar/cnobin/)1 - [Google (Firebase)](https://phishdestroy.io/registrar/google/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)11 - [.org](https://phishdestroy.io/tld/org/)2 - [.app](https://phishdestroy.io/tld/app/)2 - [.dev](https://phishdestroy.io/tld/dev/)2 - [.io](https://phishdestroy.io/tld/io/)2 - [.net](https://phishdestroy.io/tld/net/)1 - [.ws](https://phishdestroy.io/tld/ws/)1 ### Hosting networks - Cloudflare, Inc.3 - CLOUDFLARENET, US2 - FASTLY - Fastly, Inc., US2 - AS-COLOCROSSING, US1 - AMAZON-02, US1 - RAILNET Railnet LLC, US1 - COREIX-UK-AS Coreix Ltd, GB1 - WEEBLY - Weebly, Inc., US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Hsbc; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/hsbc/