Phishing detection: hsbc.dev
HSBC Screenshot
Investigate
Domain
hsbc.dev2 CT hosts on apex
urlscan
VirusTotal
Whois
IP
104.21.36.32
ipinfo
Greynoise
URL
https://hsbc.dev
Phishunt analysis Beta
27
low suspicionheuristic risk score · not a probability
Keyword matchurlscan.ioBrand in cert SAN
15 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates HSBC bank using the exact brand name under a .dev TLD, hosted on Cloudflare. Outbound links point away from genuine HSBC infrastructure, the keyword classifier scores at maximum, and urlscan independently flags it as malicious — a pattern consistent with credential harvesting.
Keyword matchNo brand linksurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 62%
Domain & Network
Whois
Registrar
Squarespace Domains II LLC.
Network
IP
104.21.36.32
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists