SPF and DMARC not propagating even after 3 days

What is the name of the domain?

2top.network

What is the error message?

(Missing Record)DMARC Record Published, for SPF - Typo

What is the issue you’re encountering

I’m trying to set up DMARC for my HubSpot account via Cloudflare. I’ve already updated both the SPF and DMARC records using the details provided by HubSpot. While I understand that DNS propagation can take some time, it’s been three days and the changes still haven’t propagated. The DMARC record is still showing the current date, which suggests it’s not updating correctly.

What steps have you taken to resolve the issue?

I’ve already spoken with HubSpot’s chat support and we went through the setup step by step to ensure everything is configured correctly. However, after checking the records using external tools like DNS Checker, they couldn’t identify any issues on their end and recommended that I reach out to Cloudflare for further assistance.

What feature, service or problem is this related to?

DNS not responding/updating

What are the steps to reproduce the issue?

Add or update the SPF and DMARC records provided by HubSpot.

Save the changes and wait for DNS propagation.

After 72 hours, use external DNS tools (e.g., DNSChecker.org) to check if the DMARC record has propagated.

Notice that the DMARC record is still showing the current date and hasn’t updated, indicating the record may not be properly propagating.

Screenshot of the error


This is the SPF and DMARC I’ve added

Can you show a screenshot of the DNS records, including the bar at the top that looks like this…

Records that are currently resolving are…
https://cf.sjr.dev/tools/check?ce715fa6ef324a508c13e9dced7674e8#dns-mail

3 Likes

Here’s the screenshot of the DNS records

The zone you are in has a status in the upper lefthand corner which says ‘finish setup’ are you sure you’re in the right account? What are the nameservers associated with the zone you are currently in on the same page?

2 Likes

My domain is in Strato but hosting is in Cloudflare. Please see screenshots below. Is this the reason why I get the errors?

As @cscharff mentioned, you are most likely in the wrong Cloudflare account, so none of the changes you make have any effect.

Please follow these steps:

Two different sets of cloudflare nameservers is a very good indicator you are logged into the wrong account. Check the domain has nameservers here, DNS Propagation Checker - Global DNS Testing Tool. If the two you see on whatsmydns are not the two you see shown on this page, https://dash.cloudflare.com/?to=/:account/:zone/dns then you are most certainly in the wrong account.

The only way you’ll be able to regain access is by having access to the email address of the other account. I’d start with this link, if you don’t know the email. Do that and then check any other email accounts for an email on gaining access. This link may help, but it only work when logged out, if you don’t know the email: https://dash.cloudflare.com/forgot-emai

1 Like

Hi @Laudian , this is the only account I have. However, both nameservers in Cloudflare and Strato does not match. Here is the nameserver of Cloudflare.

This is the nameservers in Strato.

That means the site is active in a different Cloudflare account.

Check at what address you previously received emails from Cloudflare. Maybe you logged in via Google or iCloud?

1 Like

Upon checking my website in Kajabi, it says

If you are using the Kajabi nameservers, you use Kajabi’s Cloudflare account and need to make all DNS changes on Kajabi.

1 Like


Am I going to add the DMARC and SPF records from Hubspot to Kajabi? Should I delete these existing ones?

Do you also use Kajabi for email or only Hubspot?

My website is built on Kajabi, which also handles some transactional emails. For email marketing campaigns and CRM, I use HubSpot.

In that case, better don’t delete the records for Kajabi.

You need to combine both SPF records into a single record. I can’t see what hubspot wants you to add, but it looks like a single include.

From your Cloudflare screenshot, it looks like you already know how to do that.

Just ignore the DMARC record and keep Kajabi’s.

Also, you don’t need to hide stuff like your domainkey or SPF records in your screenshots. It’s public information anyway.

1 Like

Absolutely, I’ll go ahead and do that! It’s my first time setting this up, so I’m still figuring out what should or shouldn’t be hidden—thanks for the heads-up. Just a quick question: if I update the SPF records in Kajabi, will that have any impact on my website’s visibility or just on the email deliverability?

Simply put, an SPF record is a list of IP addresses that are allowed to use your domain for email. It won’t affect your website, except where it sends emails.

2 Likes

Hi @Laudian,

Just a quick note to say the SPF record was successfully added when I updated Kajabi—thank you so much for your help!

I’m still working through the DMARC setup. Here’s the current record showing in Kajabi:

=DMARC1; p=none; rua=mailto:[email protected]; fo=1; pct=100; rf=afrf

HubSpot is asking for a different DMARC configuration. If I update the record with what HubSpot requires, will that conflict with Kajabi or cause any issues?

Thanks again for your support! :folded_hands:

2 Likes

It only says recommended, so you should be fine ignoring the dmarc record.

If you need to verify it, change the record to what Hubspot wants and then change it back.

1 Like