usa-hsbc[.]blogspot[.]com

This domain, usa-hsbc.blogspot.com, is flagged as a credential theft scam. The domain impersonates the well-known financial institution HSBC, likely to trick users into divulging sensitive information such as login credentials and personal data. The page title 'Hongkong and Shanghai Banking Corporation' further adds to the deception, mimicking the official branding of HSBC to gain trust from unsuspecting visitors.

Analysis indicates that 17 out of 95 security vendors on VirusTotal flag this domain as malicious, suggesting a significant risk. The domain was created on March 31, 2026, and is registered through Google Blogger, which is often used by threat actors due to its ease of setup and legitimacy. Additionally, the domain appears on one security blocklist and has been taken offline, indicating that it was actively used for malicious purposes. The infrastructure analysis reveals that it resolves to the IP address 142.251.36.97 and uses technologies such as Blogger, Java, Python, Bootstrap, OpenGSE, jsDelivr, and HTTP/3.

If users have visited usa-hsbc.blogspot.com, they should immediately check their HSBC accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already active. Users should also monitor their financial statements and consider reporting the incident to HSBC's customer support. Any personal information entered on the site should be considered compromised, and users should take necessary steps to secure their online presence.