CONTINUOUS INTERNET TELEMETRY24H DRIFT1,923 material changesacross 1,742 domains · -155 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,077 curated domains not answering+951 vs yesterdayERRORS14,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED38,289 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,923 material changesacross 1,742 domains · -155 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,077 curated domains not answering+951 vs yesterdayERRORS14,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED38,289 throttled or blocked our scanner429 rate-limit / 403 bot-block

hsbc.net

Observed Jul 18, 2026, 13:55 UTC (21h ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesAtlassianGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hsbc.net actually stands on - every host below is a signed observation
hsbc.net
NS
ns20.hsbc.netns20.hsbc.ukns1.hsbc.com.sgns11.hsbc.com.hk+2 more
hsbc.net + hsbc.uk + moreanswers its DNS
MX
mxb-00299f02.gslb.pphosted.commxa-00299f02.gslb.pphosted.com
Proofpointreceives its email

DNS Records

MX 2

  • 10mxb-00299f02.gslb.pphosted.com
  • 10mxa-00299f02.gslb.pphosted.com

TXT 8

  • wiz-domain-verification=c4f9ca2f3b5e74b4502b2756d19f0936af847728b0927c6bf47b5271b5331bd1
  • wiz-domain-verification=0287380846b97f4f0f2a4ff03e53728406f0dce9a75011a27fed7b4df9f4027f
  • atlassian-domain-verification=MVrygCbxi4sy2tdpLKAsoHvnI7n6c7A07JAYd14laoh1RGylTMluWtKlGkVbBHoR
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:203.112.85.13 ip4:203.112.85.14 ip4:203.112.85.15 ip4:203.112.85.16 ip4:203.112.85.17 ip4:203.112.90.14 ip4:203.112.90.15 ip4:203.112.90.16 ip4:203.112.90.17 ip4:203.112.90.35 ~all
  • google-site-verification=A0kKiM7yKmsyjf0TYm4ZHe8LAP-lenNcO47hQS1nfr4
  • wiz-domain-verification=63f5e2e7316847f581f5c811d2057ac4c60fcff9e35a208a5cc63dda5808334f
  • pendo-domain-verification=nL9BZ2ihiRp98gNCoaD7PCvibm4
  • v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

NS 6

  • ns20.hsbc.net
  • ns20.hsbc.uk
  • ns1.hsbc.com.sg
  • ns11.hsbc.com.hk
  • ns21.hsbc.net
  • ns21.hsbc.uk

SOA 1

  • ns11.hsbc.com.hk root.hsbc.com.hk

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hsbc.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hsbc.net <a href="https://domaindrift.io/t/hsbc.net"> <img src="https://domaindrift.io/badge/hsbc.net.svg" width="300" height="64" alt="DomainDrift signed observations for hsbc.net"> </a>

Ed25519 Receipt

Receipt ID
ad005f23-6189-4aee-b90a-4dda777dab9f
Output Hash
6d186210aa452883919eee8120e828c3caaa42f73b5856a7daa90aaf98a22370
Signature
ed25519:3a231c0c5fc12940cf805d3db9fa6bde00fc290d6f8bb53e5a10be080e0378d7322d3297bf41f757d4e7a0bd2e5008f8690207cc63e808bab434c4f458b6480e
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser