Any of my #infosec peeps stumbled over the .hsbc TLD ? As in www.smartserve.hsbc - which is a CNAME for www.smartserve.hsbc.edgekey.net
I'm assuming this is a scam - but it might be a badly outsourced KYC thing - it is so hard to tell the difference!
1