Phishing detection: cpanel.hsbccpersonalonlinebanking.com
HSBC Screenshot
Investigate
Domain
cpanel.hsbccpersonalonlinebanking.com10 CT hosts on apex
urlscan
VirusTotal
Whois
IP
198.38.92.102
ipinfo
Greynoise
URL
https://cpanel.hsbccpersonalonlinebanking.com
Phishunt analysis Beta
70
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +3.9 Password field
- +3.7 Brand in domain label
- +3.5 ASN reputation
- +3.4 Shared IP cluster
- +2.3 Cert reuse
- +2.0 Site cluster
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.8 Young domain
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.6 Registrar reputation
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Suspicious TLD
- +0.1 Deep subdomain
- Boosted to 45: Google-flagged credential form
- Boosted to 70: Credential + brand lookalike
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates HSBC personal online banking through a fake cPanel subdomain on a fraudulent apex domain. Contains a password input form and is flagged by Google Safe Browsing as social engineering. Shares IP and registrar infrastructure with related malicious subdomains targeting HSBC customers.
Google Safe BrowsingPassword fieldBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-16 · confidence 90%
Domain & Network
Whois
Registrar
Upperlink Limited
Network
Country
United Kingdom
United Kingdom
Hosting
WHG Hosting Services Ltd
ASN
AS51713
TLS Cert
YR1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists