{"report_id":"68e73f48-a3e8-4fef-b3db-ba1983c7355e","version":6,"status":"done","tags":[],"date":"2026-02-03T18:32:48Z","url":{"schema":"http","addr":"us.hsbcbank.com","fqdn":"us.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"ip":{"addr":"212.7.194.71","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"http","addr":"ww1.hsbcbank.com/","fqdn":"ww1.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"title":"ww1.hsbcbank.com/","dom":{"size":97,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"26c679d2cb8560dc5164d1624373b86b","sha1":"8f30a7a18c04fac00e062386dfe9417254d59163","sha256":"339fe38e07903fc3364d21fcc8b9d110171b93183b481f003f6d02d2f01a668c","sha512":"d74a1f1e382af77b875291cc62053542b9892fd9d1535883db159c0480a801a8939c57fa0a2d3d795bced29e2d7f87eb851659aa5d30dafcb9d0473690b5dfd8","ssdeep":"","tlshash":"feb012fc624809cb3e5074805ec533870834594461b3d7444cd910649158972ccc33c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us.hsbcbank.com","fqdn":"us.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"ip":{"addr":"212.7.194.71","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T18:32:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"us.hsbcbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"ww1.hsbcbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"us.hsbcbank.com","ip":{"addr":"212.7.194.71","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-08-06","domain_rank":0,"first_seen":"2026-02-03T18:32:48.55723Z","last_seen":"2026-02-03T18:32:48.55723Z","alert_count":1,"request_count":1,"received_data":419,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"ww1.hsbcbank.com","ip":{"addr":"91.195.240.50","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"1997-08-06","domain_rank":0,"first_seen":"2025-09-23T11:55:17.268922Z","last_seen":"2025-10-15T03:47:29.553824Z","alert_count":2,"request_count":2,"received_data":579,"sent_data":758,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us.hsbcbank.com/","fqdn":"us.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"ip":{"addr":"212.7.194.71","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T18:32:27.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcbank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 01:30:47 GMT","end":"Tue, 14 Apr 2026 01:30:46 GMT"},"fingerprint":{"sha1":"DD:65:96:8F:FF:92:2D:0C:FC:8E:B1:BB:A1:F8:6E:AA:0A:A7:9E:40","sha256":"A4:D5:4D:EC:C3:6A:75:82:D2:41:1E:EF:5E:4A:AB:CE:5E:C3:1E:FD:1B:47:AA:83:63:4A:58:D4:17:A1:6E:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us.hsbcbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Tue, 03 Feb 2026 18:32:27 GMT\r\nlocation: http://ww1.hsbcbank.com\r\nserver: Cowboy\r\nset-cookie: sid=b0fa98c4-012e-11f1-92f1-983692c1a172; path=/; domain=.hsbcbank.com; expires=Sun, 21 Feb 2094 21:46:34 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":58,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":120,"dns":62,"connect":22,"send":0,"wait":219,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"us.hsbcbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww1.hsbcbank.com/","fqdn":"ww1.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"ip":{"addr":"91.195.240.50","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T18:32:27.665Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww1.hsbcbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\ndate: Tue, 03 Feb 2026 18:32:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nlast-modified: Tue, 03 Feb 2026 18:32:28 GMT\r\nx-cache-miss-from: parking-84f8ffbfb7-cgpx4\r\nserver: Parking/1.0\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":58,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"exported SGML document, ASCII text","md5":"b288855ae6942dcab6df2c041563e635","sha1":"6e6c61576a871446e7508f4369da0e5f112efe5d","sha256":"282c0e094ca041768bf389f6a42b3ae9547e38eb62346236c6d6c4fe73f1307b","sha512":"89e47d0cd414dc21b5bc5c0ff14e264cc4745650dd733db72017222efe62e1f82fa7ace7a863e11cd02dc2a65dd65c57a66a56c2f068635ca97c750c46018f22","ssdeep":"","tlshash":"3aa00268264c0ada3a819444a64536474525684591f6e398086e405562a9db1d4d62c8","first_seen":"2023-04-09T19:07:58Z","last_seen":"2026-06-14T23:30:12.675661Z","times_seen":430,"resource_available":true,"data":null}},"time_used":1090,"timings":{"blocked":523,"dns":491,"connect":31,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"ww1.hsbcbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww1.hsbcbank.com/favicon.ico","fqdn":"ww1.hsbcbank.com","domain":"hsbcbank.com","tld":"com"},"ip":{"addr":"91.195.240.50","port":80,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww1.hsbcbank.com/","date":"2026-02-03T18:32:28.358Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww1.hsbcbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.hsbcbank.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 441 \r\ndate: Tue, 03 Feb 2026 18:32:28 GMT\r\ncontent-length: 0\r\nserver: Parking/1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"441","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"ww1.hsbcbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}