Skip to content
Gridlode
Rank #4,475Updated November 10, 2026

hsbc.com

HSBC Group corporate website | HSBC Holdings plc

hsbc.com is registered with MarkMonitor Inc. since January 29, 1999 (27.8 years). The registration expires on January 29, 2028. The site runs on Content Security Policy, HSTS, Tealium. Its email security grade is B. Its SSL certificate is issued by DigiCert Inc and is valid for 91 more days.

Domain age
27.8 yrs
Technologies
3
Email security
B
SSL days left
91

Registration

RegistrarMarkMonitor Inc.
IANA ID292
RegisteredJanuary 29, 1999
ExpiresJanuary 29, 2028
UpdatedDecember 28, 2025
Statusclient delete prohibited, client transfer prohibited, client update prohibited
Name serversns20.hsbc.net, ns20.hsbc.uk, ns21.hsbc.net, ns21.hsbc.uk, ns3.hsbc.com, ns6.hsbc.com
DNSSECNot signed

DNS records

TypeValueTTL
A193.108.75.6260
A91.214.6.6260
MXmxb-00299f02.gslb.pphosted.com 10900
MXmxa-00299f02.gslb.pphosted.com 10900
NSns3.hsbc.com86400
NSns20.hsbc.net86400
NSns21.hsbc.uk86400
NSns21.hsbc.net86400
NSns20.hsbc.uk86400
NSns6.hsbc.com86400
TXTjamf-site-verification=hUHjpDIEEf1eN5Q7FhUbZw300
TXTwork-accounts-domain-verification=p5eoAgBQd4EsOnDg2LKRdQ3g3rPYty300
TXTv=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf-00299f02.pphosted.com include:spf1.hsbc.com include:spf2.hsbc.com include:spf3.hsbc.com include:spf-002f0603.pphosted.com ~all300
TXTgoogle-site-verification=NI7zII4Ge_p28m0XfsDGMj77Nly4XabBi4MonUEVcUM300
TXTgoogle-site-verification=vPkZv7fjzUVwP2apQBxXmbtPQb0PAhU5k9KuxnAwr5o300
TXTgoogle-site-verification=M4iN_PX9kRTMMWq44Gj5N0yCKw21840zwBXdoBk1XJM300
TXTadobe-idp-site-verification=97bd1b56bb7c1bf2b021fcc1aa99f303be57821beda2e03442612fe631a071e5300
TXTwebexdomainverification.=de5860e7-75ed-4687-9345-095d6298d12b300
TXTwebexdomainverification.=e10dece0-359f-4aa8-85f9-8fd61121b3c1300
TXTwebexdomainverification.JO59=608c80a0-fcc1-4022-8b7f-d99cee31b523300
TXTwebexdomainverification.GVLY=f509eddc-026a-40ff-896d-94a2a7c5089a300
TXTwebexdomainverification.L2W7=69ac8949-902f-4c8c-90d0-4a0d3dcedb1c300

Technology stack

SSL certificate

ValidValid
IssuerUS, DigiCert EV RSA CA G2, DigiCert Inc
ExpiresFebruary 9, 2027
Days remaining91
ProtocolTLSv1.2
Nameshsbc.com

Email security

BScore 83/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodSPF ends with ~all: servers you have not listed are marked as suspicious (soft fail).
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected].
  • goodDKIM keys found (selector: google).
  • good2 MX record(s) found. Mail is handled by Proofpoint.

Homepage metadata

TitleHSBC Group corporate website | HSBC Holdings plc
DescriptionHSBC, one of the largest banking and financial services institutions in the world, serves millions of customers through its four global businesses.
Languageen
Canonicalhttps://www.hsbc.com/
Structured dataVideoObject, WebSite
IndexableYes
Word count1169

About hsbc.com

Who is the registrar of hsbc.com?

hsbc.com is registered with MarkMonitor Inc. (IANA ID 292).

When does hsbc.com expire?

The current registration of hsbc.com expires on January 29, 2028. It was first registered on January 29, 1999.

What technology does hsbc.com use?

We detected 3 technologies on hsbc.com, including Content Security Policy, HSTS, Tealium.

Does hsbc.com protect its email with SPF and DMARC?

hsbc.com scores 83/100 (grade B) for email security. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection. No TLS-RPT record, so you won't hear about failed encrypted deliveries.

What are the name servers of hsbc.com?

hsbc.com uses ns3.hsbc.com, ns20.hsbc.net, ns21.hsbc.uk, ns21.hsbc.net, ns20.hsbc.uk, ns6.hsbc.com.