Domain
hsbc.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of hsbc.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
886
A/AAAA targets
Subdomains
1,542
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
9
in our scans
DNS Records
A
193.108.75.62, 91.214.6.62
AAAA
—
MX
10 mxa-00299f02.gslb.pphosted.com, 10 mxb-00299f02.gslb.pphosted.com
NS
ns20.hsbc.net, ns20.hsbc.uk, ns21.hsbc.net, ns21.hsbc.uk, ns3.hsbc.com, ns6.hsbc.com
TXT
5700a0f161c3ee56b1cdb45f8ff0d606, 6F33-A96D-4A70-B2F3-8980-0DA9-C687-9C2F, 7c573538-4895-4bd2-90b9-13ecb67623b3, 8219-5848-B517-278B-A270-122C-5E8F-C5ED, 96b06eef013a4fa7ba21975d52f6cea8ba5586141e604aad968e8e8a6a6b0d0c, JcqN2r7Z4NJrQpM4OGXTOw, _github-challenge-hsbc-ent.hsbc.com=2c0124c517, adobe-idp-site-verification=97bd1b56bb7c1bf2b021fcc1aa99f303be57821beda2e03442612fe631a071e5
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: api-uat.securities-services.gbm.hsbc.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: api-dev.securities-services.gbm.hsbc.com, api-sandbox-uat.securities-services.gbm.hsbc.com, api-sit.securities-services.gbm.hsbc.com, api-uat.securities-services.gbm.hsbc.com, file-api-dev.securities-services.gbm.hsbc.com, file-api-sit.securities-services.gbm.hsbc.com, file-api-uat.securities-services.gbm.hsbc.com
Subject: content.maint.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.maint.online-banking.hsbc.com.eg
Subject: www.content.online-banking.ciiom.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: www.content.online-banking.ciiom.hsbc.com
Subject: invest.assetmanagement.hsbc.com.tw
Issuer: DigiCert EV RSA CA G2
SANs: invest.assetmanagement.hsbc.com.tw
Subject: static.tko.lp.services.online-banking.expat.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: static.tko.lp.services.online-banking.expat.hsbc.com
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: static.services.online-banking.hsbc.com.ph
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.ph
Subject: content.maint.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.maint.online-banking.hsbc.com.eg
Subject: www.content.online-banking.ciiom.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: www.content.online-banking.ciiom.hsbc.com
Subject: hktkogdcvi120.hsbc.com.hk
Issuer: DigiCert EV RSA CA G2
SANs: hktkogdcvi120.hsbc.com.hk, remoteaccess.hsbc.com.hk, staff-remoteaccess.hsbc.com.hk
Subject: static.lp.services.online-banking.hsbc.com.mx
Issuer: DigiCert EV RSA CA G2
SANs: static.lp.services.online-banking.hsbc.com.mx
Subject: merchantbox.business.hsbc.com.hk
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: merchantbox.business.hsbc.com.hk, www.merchantbox.business.hsbc.com.hk
Subject: static.services.online-banking.hsbc.com.au
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.au
Subject: ob-api.online-banking.business.hsbc.com.hk
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: ob-api.online-banking.business.hsbc.com.hk
Subject: www.content.online-banking.ciiom.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: www.content.online-banking.ciiom.hsbc.com
Subject: static.services.online-banking.hsbc.com.cn
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.cn
Subject: static.services.online-banking.hsbc.com.ph
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.ph
Subject: static.lp.services.online-banking.hsbc.com.mx
Issuer: DigiCert EV RSA CA G2
SANs: static.lp.services.online-banking.hsbc.com.mx
Subject: www.content.online-banking.ciiom.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: www.content.online-banking.ciiom.hsbc.com
Subject: cnifc---vi006.hsbc.com.cn
Issuer: DigiCert EV RSA CA G2
SANs: cnifc---vi006.hsbc.com.cn, remoteaccess.hsbc.com.cn, staff-remoteaccess.hsbc.com.cn
Subject: static.services.online-banking.hsbc.com.au
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.au
Subject: static.services.online-banking.hsbc.com.ph
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.ph
Subject: usnlildzva009.vpn.us.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: ac3.vpn.us.hsbc.com, anyceast.hsbc.ca, anycwest.hsbc.ca, remoteaccess.us.hsbc.com, usnlildzva009.vpn.us.hsbc.com
Subject: static.services.online-banking.expat.hsbc.com
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.expat.hsbc.com
Subject: leapx.business.hsbc.com.hk
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: api.leapx.business.hsbc.com.hk, files-public.leapx.business.hsbc.com.hk, files.leapx.business.hsbc.com.hk, leapx.business.hsbc.com.hk, messaging.leapx.business.hsbc.com.hk, public.leapx.business.hsbc.com.hk
Subject: static.services.online-banking.hsbc.com.mx
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.mx
Subject: static.tko.lp.services.online-banking.hsbc.com.cn
Issuer: DigiCert EV RSA CA G2
SANs: static.tko.lp.services.online-banking.hsbc.com.cn
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: static.services.online-banking.hsbc.com.cn
Issuer: DigiCert EV RSA CA G2
SANs: static.services.online-banking.hsbc.com.cn
Subject: static.tko.lp.services.online-banking.hsbc.com.cn
Issuer: DigiCert EV RSA CA G2
SANs: static.tko.lp.services.online-banking.hsbc.com.cn
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 77.221.137.188 | AS210644 | AS16509 | 95% | cert e9ff2bad… served by 77.221.137.188 (AS210644) carries SAN expat.hsbc.com which currently resolves through Amazon (AS16509) at 18.238.243.51, 18.238.243.12, 18.238.243.55, 18.238.243.87 |
| 85.121.245.148 | AS9009 | AS16509 | 95% | cert e9ff2bad… served by 85.121.245.148 (AS9009) carries SAN expat.hsbc.com which currently resolves through Amazon (AS16509) at 18.244.18.73, 18.244.18.26, 18.244.18.93, 18.244.18.14 |
| 38.180.201.26 | AS9009 | AS16509 | 95% | cert e9ff2bad… served by 38.180.201.26 (AS9009) carries SAN expat.hsbc.com which currently resolves through Amazon (AS16509) at 18.238.243.51, 18.238.243.12, 18.238.243.55, 18.238.243.87 |
| 144.31.180.64 | AS216127 | AS16509 | 95% | cert e9ff2bad… served by 144.31.180.64 (AS216127) carries SAN expat.hsbc.com which currently resolves through Amazon (AS16509) at 18.244.18.73, 18.244.18.26, 18.244.18.93, 18.244.18.14 |
| 138.124.49.75 | AS210644 | AS16509 | 95% | cert e9ff2bad… served by 138.124.49.75 (AS210644) carries SAN expat.hsbc.com which currently resolves through Amazon (AS16509) at 18.244.18.73, 18.244.18.26, 18.244.18.93, 18.244.18.14 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 10 mxb-00299f02.gslb.pphosted.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | 7c573538-4895-4bd2-90b9-13ecb67623b3 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | atlassian-domain-verification=MVrygCbxi4sy2tdpLKAsoHvnI7n6c7A07JAYd14laoh1RGylTMluWtKlGkVbBHoR | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns3.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns21.hsbc.net | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | adobe-idp-site-verification=97bd1b56bb7c1bf2b021fcc1aa99f303be57821beda2e03442612fe631a071e5 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | docker-verification=0a84016e-f30a-49a9-8a41-ef819b497664 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.=e10dece0-359f-4aa8-85f9-8fd61121b3c1 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | f9fe8b945d159604d4fe56f68fd5a851 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | JcqN2r7Z4NJrQpM4OGXTOw | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns6.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns20.hsbc.net | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | docusign=e04d54f1-8d92-40bb-a780-2409999953c1 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.JO59=608c80a0-fcc1-4022-8b7f-d99cee31b523 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.L2W7=69ac8949-902f-4c8c-90d0-4a0d3dcedb1c | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns20.hsbc.uk | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| A | 193.108.75.62 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.GVLY=f509eddc-026a-40ff-896d-94a2a7c5089a | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | 5700a0f161c3ee56b1cdb45f8ff0d606 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| MX | 10 mxa-00299f02.gslb.pphosted.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | docker-verification=2885f98d-883c-4171-88f5-44ebc35fd452 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | pendo-domain-verification=680c814a-0ddf-4099-8055-d7cc73af8d5a | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | work-accounts-domain-verification=p5eoAgBQd4EsOnDg2LKRdQ3g3rPYty | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sip._tcp 1 5 5060 sipserver.wdc.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | google-site-verification=M4iN_PX9kRTMMWq44Gj5N0yCKw21840zwBXdoBk1XJM | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | 8219-5848-B517-278B-A270-122C-5E8F-C5ED | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | wiz-domain-verification=0287380846b97f4f0f2a4ff03e53728406f0dce9a75011a27fed7b4df9f4027f | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sips._tcp 10 10 5061 mraedge8.mra-emea.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | wiz-domain-verification=c4f9ca2f3b5e74b4502b2756d19f0936af847728b0927c6bf47b5271b5331bd1 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| A | 91.214.6.62 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sips._tcp 10 10 5061 mraedge5.mra-emea.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | adobe-sign-verification=33807990c7278c58bea18223c41dcf38 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf-00299f02.pphosted.com include:spf1.hsbc.com include:spf2.hsbc.com include:spf3.hsbc.com include:spf-002f0603.pphosted.com ~all | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | 96b06eef013a4fa7ba21975d52f6cea8ba5586141e604aad968e8e8a6a6b0d0c | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sip._tcp 1 5 5060 sipserver.sy.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | google-site-verification=NI7zII4Ge_p28m0XfsDGMj77Nly4XabBi4MonUEVcUM | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | _github-challenge-hsbc-ent.hsbc.com=2c0124c517 | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | mongodb-site-verification=IZGVt2wuFTz4U2KdEQTxNjbTM5MQ4agI | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.L2W2=72eed45f-93c2-4f58-8c1f-407b22083b6c | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.=cf1ab7f9-8d4c-4d37-aff4-4a88b437614c | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | c77e0dfe9d1771b49cbbf615650b24e | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | wiz-domain-verification=63f5e2e7316847f581f5c811d2057ac4c60fcff9e35a208a5cc63dda5808334f | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | google-site-verification=vPkZv7fjzUVwP2apQBxXmbtPQb0PAhU5k9KuxnAwr5o | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sips._tcp 10 10 5061 mraedge6.mra-emea.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | docusign=dd1edf13-79d6-4d57-ae88-ba915685297c | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | oMhmK373syyyImHpn7IVEXhqDzNC | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | 6F33-A96D-4A70-B2F3-8980-0DA9-C687-9C2F | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| NS | ns21.hsbc.uk | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | jamf-site-verification=hUHjpDIEEf1eN5Q7FhUbZw | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| SRV | _sips._tcp 10 10 5061 mraedge7.mra-emea.hsbc.com | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |
| TXT | webexdomainverification.=de5860e7-75ed-4687-9345-095d6298d12b | 2026-06-02 02:46:39.720 | 2026-07-26 21:50:42.449 |