New Registrations

HSBC phishing domains

Newly registered lookalikes - tracked daily

HSBC phishing domains

Newly registered lookalikes - tracked daily

Tracked (7d)
17
New (24h)
10
vs avg
—
Website
hsbc.com
About
AIGlobal retail and business banking phishing. Credentials, OTP capture, and second-factor-bypass pages are the recurring pattern.
TLDs
.xyz (10) · .com (6) · .space (1)
Hosts
Hetzner Online GmbH (10) · Hostinger International Limited (2) · Akamai Connected Cloud (2)
Countries
FinlandFinland (10) · United StatesUnited States (3) · CyprusCyprus (2)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-06-30 02:01 2026-06-30 02:01
https://sony-hsbc.xyz
Screenshot of sony-hsbc.xyz Details
2026-06-30 01:58 2026-06-30 01:58
https://sap-hsbc.xyz
Screenshot of sap-hsbc.xyz Details
2026-06-30 01:43 2026-06-30 01:43
https://hsbc-nintendo.xyz
Screenshot of hsbc-nintendo.xyz Details
2026-06-30 01:43 2026-06-30 01:43
https://hsbc-facebook.xyz
Screenshot of hsbc-facebook.xyz Details
2026-06-30 01:43 2026-06-30 01:43
https://hsbc-citi.xyz
Screenshot of hsbc-citi.xyz Details
2026-06-29 00:59 2026-06-29 00:59
https://uber-hsbc.xyz
Screenshot of uber-hsbc.xyz Details
2026-06-29 00:56 2026-06-29 00:56
https://pfizer-hsbc.xyz
Screenshot of pfizer-hsbc.xyz Details
2026-06-29 00:51 2026-06-29 00:51
https://hsbc-xbox.xyz
Screenshot of hsbc-xbox.xyz Details
2026-06-29 00:51 2026-06-29 00:51
https://hsbc-target.xyz
Screenshot of hsbc-target.xyz Details
2026-06-29 00:51 2026-06-29 00:51
https://hsbc-starbucks.xyz
Screenshot of hsbc-starbucks.xyz Details
2026-06-28 01:50 2026-06-28 01:50
https://hsbcnetglobal.com
Screenshot of hsbcnetglobal.com Details
2026-06-28 01:50 2026-06-28 01:50
https://hsbcglobalservices.com
Screenshot of hsbcglobalservices.com Details
2026-06-27 01:23 2026-06-27 01:23
https://hsbc.space
Screenshot of hsbc.space Details
2026-06-26 01:57 2026-06-26 01:57
https://hsbccbanking.com
Screenshot of hsbccbanking.com Details
2026-06-25 01:56 2026-06-25 01:56
https://hsbcinnovations.com
Screenshot of hsbcinnovations.com Details
2026-06-25 01:54 2026-06-25 01:54
https://hsbc-festgeld.com
Screenshot of hsbc-festgeld.com Details
2026-06-23 01:38 2026-06-23 01:38
https://hsbc-malta-support.com
Screenshot of hsbc-malta-support.com Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://sony-hsbc.xyz
Screenshot of sony-hsbc.xyz Details
https://sap-hsbc.xyz
Screenshot of sap-hsbc.xyz Details
https://hsbc-nintendo.xyz
Screenshot of hsbc-nintendo.xyz Details
https://hsbc-facebook.xyz
Screenshot of hsbc-facebook.xyz Details
https://hsbc-citi.xyz
Screenshot of hsbc-citi.xyz Details
https://uber-hsbc.xyz
Screenshot of uber-hsbc.xyz Details
https://pfizer-hsbc.xyz
Screenshot of pfizer-hsbc.xyz Details
https://hsbc-xbox.xyz
Screenshot of hsbc-xbox.xyz Details
https://hsbc-target.xyz
Screenshot of hsbc-target.xyz Details
https://hsbc-starbucks.xyz
Screenshot of hsbc-starbucks.xyz Details
https://hsbcnetglobal.com
Screenshot of hsbcnetglobal.com Details
https://hsbcglobalservices.com
Screenshot of hsbcglobalservices.com Details
https://hsbc.space
Screenshot of hsbc.space Details
https://hsbccbanking.com
Screenshot of hsbccbanking.com Details
https://hsbcinnovations.com
Screenshot of hsbcinnovations.com Details
https://hsbc-festgeld.com
Screenshot of hsbc-festgeld.com Details
https://hsbc-malta-support.com
Screenshot of hsbc-malta-support.com Details

AIHow to verify a real HSBC URL

  • Legitimate HSBC URLs always end in hsbc.com (e.g. www.hsbc.com, account.hsbc.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not HSBC.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — HSBC has owned hsbc.com for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open hsbc.com from your browser bookmark or type the domain manually.
  • Real HSBC pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.