Suspicious

Phishings targeting HSBC

Suspicious and active websites

Phishings targeting Hsbc

Suspicious and active websites

Active
8
New (7d)
2
Trend (7d)
—
Website
hsbc.com
About
AIGlobal retail and business banking phishing. Credentials, OTP capture, and second-factor-bypass pages are the recurring pattern.
Hosts
Akamai Connected Cloud (3) · Amazon.com, Inc. (2) · Sucuri (1)
Countries
United StatesUnited States (7) · GermanyGermany (1)
TLS certs
Let's Encrypt (5) · Google Trust Services (1) · Amazon RSA 2048 M01 (1)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-07-22 19:30 2026-07-21 05:06
https://hsbconlinebankingresetpin.ph
Screenshot of hsbconlinebankingresetpin.ph urlscan Details
2026-07-22 19:30 2026-07-18 13:02
http://empresas-hsbc.com
Screenshot of empresas-hsbc.com OpenPhish urlscan Details
2026-07-22 19:30 2026-07-07 12:20
https://hsbc-bank-london.ws
Screenshot of hsbc-bank-london.ws urlscan Details
2026-07-22 19:30 2026-06-13 23:31
https://hsbcbankuk.ws
Screenshot of hsbcbankuk.ws urlscan Details
2026-07-22 19:30 2026-06-09 15:34
https://hsbc-sec.com
Screenshot of hsbc-sec.com urlscan Details
2026-07-22 19:30 2026-05-24 16:25
https://hsbcpress.com
Screenshot of hsbcpress.com urlscan Details
2026-07-22 19:30 2026-05-10 19:21
https://hsbc.dev
Screenshot of hsbc.dev urlscan Details
2026-07-22 19:30 2026-04-26 13:00
https://cn-hsbc.foryour.review
Screenshot of cn-hsbc.foryour.review GSB OpenPhish Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://hsbconlinebankingrese…
urlscan 		Screenshot of hsbconlinebankingresetpin.ph Details
http://empresas-hsbc.com
OpenPhish urlscan 		Screenshot of empresas-hsbc.com Details
https://hsbc-bank-london.ws
urlscan 		Screenshot of hsbc-bank-london.ws Details
https://hsbcbankuk.ws
urlscan 		Screenshot of hsbcbankuk.ws Details
https://hsbc-sec.com
urlscan 		Screenshot of hsbc-sec.com Details
https://hsbcpress.com
urlscan 		Screenshot of hsbcpress.com Details
https://hsbc.dev
urlscan 		Screenshot of hsbc.dev Details
https://cn-hsbc.foryour.review
GSB OpenPhish 		Screenshot of cn-hsbc.foryour.review Details

AIHow to verify a real HSBC URL

  • Legitimate HSBC URLs always end in hsbc.com (e.g. www.hsbc.com, account.hsbc.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not HSBC.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open hsbc.com from your browser bookmark or type the domain manually.
  • Real HSBC pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.