CONTINUOUS INTERNET TELEMETRY24H DRIFT541 material changesacross 474 domains · -117 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,033 curated domains not answering+204 vs yesterdayERRORS20,272 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED55,612 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT541 material changesacross 474 domains · -117 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT2 domains switched issuing CA24hNOW3,033 curated domains not answering+204 vs yesterdayERRORS20,272 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED55,612 throttled or blocked our scanner429 rate-limit / 403 bot-block

hsbc.com

Observed Jul 18, 2026, 12:03 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onHSBC-UK
Email byProofpoint
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleDockerDocuSignAtlassian
banks
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat hsbc.com actually stands on - every host below is a signed observation
hsbc.com
A / AAAA
91.214.6.62193.108.75.62
HSBC-UKserves the site
NS
ns20.hsbc.netns20.hsbc.ukns6.hsbc.comns21.hsbc.uk+2 more
hsbc.net + hsbc.uk + moreanswers its DNS
MX
mxa-00299f02.gslb.pphosted.commxb-00299f02.gslb.pphosted.com
Proofpointreceives its email

DNS Records

A 2

  • 91.214.6.62
  • 193.108.75.62

MX 2

  • 10mxa-00299f02.gslb.pphosted.com
  • 10mxb-00299f02.gslb.pphosted.com

TXT 36

  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf-00299f02.pphosted.com include:spf1.hsbc.com include:spf2.hsbc.com include:spf3.hsbc.com include:spf-002f0603.pphosted.com ~all
  • google-site-verification=NI7zII4Ge_p28m0XfsDGMj77Nly4XabBi4MonUEVcUM
  • google-site-verification=vPkZv7fjzUVwP2apQBxXmbtPQb0PAhU5k9KuxnAwr5o
  • google-site-verification=M4iN_PX9kRTMMWq44Gj5N0yCKw21840zwBXdoBk1XJM
  • adobe-idp-site-verification=97bd1b56bb7c1bf2b021fcc1aa99f303be57821beda2e03442612fe631a071e5
  • webexdomainverification.=de5860e7-75ed-4687-9345-095d6298d12b
  • webexdomainverification.=e10dece0-359f-4aa8-85f9-8fd61121b3c1
  • webexdomainverification.JO59=608c80a0-fcc1-4022-8b7f-d99cee31b523
  • webexdomainverification.GVLY=f509eddc-026a-40ff-896d-94a2a7c5089a
  • webexdomainverification.L2W7=69ac8949-902f-4c8c-90d0-4a0d3dcedb1c

NS 6

  • ns20.hsbc.net
  • ns20.hsbc.uk
  • ns6.hsbc.com
  • ns21.hsbc.uk
  • ns21.hsbc.net
  • ns3.hsbc.com

SOA 1

  • ns3.hsbc.com dnsmaster.hsbc.com

SRV 6

  • sipserver.wdc.hsbc.com:5060 p1
  • sipserver.sy.hsbc.com:5060 p1
  • mraedge5.mra-emea.hsbc.com:5061 p10
  • mraedge8.mra-emea.hsbc.com:5061 p10
  • mraedge7.mra-emea.hsbc.com:5061 p10
  • mraedge6.mra-emea.hsbc.com:5061 p10

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for hsbc.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for hsbc.com <a href="https://domaindrift.io/t/hsbc.com"> <img src="https://domaindrift.io/badge/hsbc.com.svg" width="300" height="64" alt="DomainDrift signed observations for hsbc.com"> </a>

Ed25519 Receipt

Receipt ID
42793616-56f7-4fd1-9169-a35445abf513
Output Hash
b90c6cd4315969261ab14644634102d3497b57e3c4c2ae813e1184f68d0d1ea2
Signature
ed25519:a418eb359c389676b87dbc70e26320c7355dfbde9bb5078b08a611c0f2f944292d3c87d4b005265f52654807098d8e3d58659e7b882ddcc63a9105e0c56f8809
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser