~/d/hsbc.com
// hsbc.com
Live audit across 8 checks. Cached 24h · generated less than a minute ago.
domain_grade
A
strong
87
/ 100 · across 8 checks
// points lost on:
spf −5
security headers −5
dnssec −3
SSL Certificate
[ OK ]
Valid for 293 more days.
Issued by DigiCert EV RSA CA G2 · 293 days left · TLSv1.2
DMARC Policy
[ OK ]
Strict DMARC policy enforced. Spoofed mail is rejected.
v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]
SPF Record
[ WARN ]
Soft fail (~all). Unauthorized senders flagged but not rejected. Consider -all for stronger protection.
6 lookups · all=~all
MX Records
[ OK ]
MX configured (2 record(s)).
10 mxa-00299f02.gslb.pphosted.com · 10 mxb-00299f02.gslb.pphosted.com
Name Servers
[ OK ]
6 authoritative nameservers
ns20.hsbc.net · ns20.hsbc.uk · ns21.hsbc.net
WHOIS
[ OK ]
Valid for 648 more days.
Registrar: MarkMonitor Inc. · expires 2028-01-29
Security Headers
[ WARN ]
Decent but improvable (68/100) — missing: Permissions-Policy · weak: content-security-policy
Score 68/100
[ embed_grade_badge ]
Domain grade: A — strong
markdown (github readme)
[](https://dombrains.com/d/hsbc.com)
html (any webpage)
<a href="https://dombrains.com/d/hsbc.com"><img src="https://dombrains.com/badge/hsbc.com/grade.svg" alt="DomBrains grade: A"></a>
// re-queries our scoring engine · cached 1h at the edge · backlinks to this profile page
[ per_check_badges ]
<img src="https://dombrains.com/badge/hsbc.com/ssl">
<img src="https://dombrains.com/badge/hsbc.com/dmarc">
<img src="https://dombrains.com/badge/hsbc.com/spf">
<img src="https://dombrains.com/badge/hsbc.com/mx">
<img src="https://dombrains.com/badge/hsbc.com/dnssec">
<img src="https://dombrains.com/badge/hsbc.com/security_headers">