I can confirm that the path in hsbc.php is correct after changing host and that its 755. This is a dedicated server so I have full control over it. The host is 1&1, would they still have access to control testHash.e even though its a dedicated server?
The path in hsbc.php is:
/var/www/vhosts/domain.co.uk/httpdocs/cgi-bin
(domain censored)
There is also a cgi-bin outside httpdocs, I've tried this one too but no luck.