jsophielombard[.]pages[.]dev

This domain, jsophielombard.pages.dev, was designed to trick visitors into thinking they were on an official HSBC banking portal. In reality, it was a sophisticated phishing site aimed at stealing login credentials and other sensitive financial information. The page title, "J Sophie Lombard - Almire KarolinaTessa ClariceLelah StJ Sophie Lombard," appears to be a jumble of names likely used to evade detection while the underlying page mimicked HSBC's login interface. Anyone who entered their username and password on this site would have handed them directly to cybercriminals.

PhishDestroy's analysis uncovered several red flags that confirm this threat. VirusTotal reported that 10 out of 95 security vendors flagged the domain as malicious, and Google Safe Browsing explicitly labeled it as phishing. The domain was registered on June 22, 2025, through Cloudflare, Inc., a common registrar for malicious sites due to its privacy features. It resolved to an IPv6 address (2606:4700:310c::ac42:2f27) and appeared on at least one security blocklist. The SSL certificate, issued by Google Trust Services, gave the site a false sense of legitimacy, but the underlying intent was fraudulent.

If you visited this site and entered any credentials, you should change your HSBC passwords immediately and enable two-factor authentication on your account. Also, contact HSBC's fraud department to alert them of the potential compromise. Run a full antivirus scan on your device, as phishing sites sometimes deploy malware. For future protection, always verify the URL before logging in and use a reputable security tool like PhishDestroy to check suspicious links. Remember, legitimate banks never ask for sensitive information through unsolicited links.