hubspot.com

71/100

Mail provider: Google Workspace

Check		Details
MX	✔	smtp.google.com
SPF	⚠	v=spf1 redirect=_hspf.hubspot.com (4 lookups); does not include Google Workspace (include:_spf.google.com)
DKIM	⚠	Selectors found: google (1024-bit), s1 (2048-bit+), s2 (1024-bit), mandrill (1024-bit), hs1 (2048-bit+), hs2 (2048-bit+), pic (1024-bit); upgrade 1024-bit keys to 2048-bit
DMARC	✔	v=DMARC1;p=reject;pct=100;rua=mailto:bdlk5ayo@ag.dmarcian.com;ruf=mailto:bdlk5ayo@fr.dmarcian.com
MTA-STS	⚠	Not set (optional; enforces TLS for mail sent to you)
TLS-RPT	⚠	Not set (optional; reports TLS delivery failures)
BIMI	✔	v=BIMI1; l=https://www.hubspot.com/hubfs/hubspot_inc_1435039322.svg; a=https://www.hubspot.com/hubfs/hubspot_inc_1435039322.pem;

How to fix it

SPF — Update the TXT record at hubspot.com (keeps your existing senders)
```
v=spf1 redirect=_hspf.hubspot.com include:_spf.google.com ~all
```

DNS changes can take up to 24–48 hours. Re-run the check afterwards.

Want it fixed for you? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr

Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.