hubspot.com

Checked 22 October 2026, 09:13 UTC · via 8.8.8.8
!Passed with warnings
19 passed 2 warnings 0 failed 6 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-02-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
6 February 2005
Last changed
5 January 2025
Expires
6 February 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
jerry.ns.cloudflare.com, yolanda.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-06 #3
    The registration is valid until 2027-02-06 (107 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.

Delegation

info

looking up the nameservers of com: DNS query for com failed: read udp 46.225.38.91:37599->8.8.8.8:53: i/o timeout

Found

NS in the zone
jerry.ns.cloudflare.com, yolanda.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
jerry.ns.cloudflare.com (zone only)172.64.33.182 108.162.193.182 173.245.59.182 2606:4700:58::adf5:3bb6 2a06:98c1:50::ac40:21b6 2803:f800:50::6ca2:c1b6AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-
yolanda.ns.cloudflare.com (zone only)173.245.58.241 108.162.192.241 172.64.32.241 2a06:98c1:50::ac40:20f1 2803:f800:50::6ca2:c0f1 2606:4700:50::adf5:3af1AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US - - AS13335 CLOUDFLARENET - Cloudflare, Inc., US-

Checks

  • i
    Could not be checked
    The delegation lookup failed, so this could not be checked: looking up the nameservers of com: DNS query for com failed: read udp 46.225.38.91:37599->8.8.8.8:53: i/o timeout
    #6
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 10 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
jerry.ns.cloudflare.com 172.64.33.182NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
jerry.ns.cloudflare.com 108.162.193.182NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
jerry.ns.cloudflare.com 173.245.59.182NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
jerry.ns.cloudflare.com 2606:4700:58::adf5:3bb6NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
jerry.ns.cloudflare.com 2a06:98c1:50::ac40:21b6NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
jerry.ns.cloudflare.com 2803:f800:50::6ca2:c1b6NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 173.245.58.241NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 108.162.192.241NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 172.64.32.241NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 2a06:98c1:50::ac40:20f1NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 2803:f800:50::6ca2:c0f1NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
yolanda.ns.cloudflare.com 2606:4700:50::adf5:3af1NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: jerry.ns.cloudflare.com: "2026.10.2"; yolanda.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2418128396 · primary jerry.ns.cloudflare.com

Found

Primary (MNAME)
jerry.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2418128396
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
jerry.ns.cloudflare.com (172.64.33.182)2418128396
jerry.ns.cloudflare.com (108.162.193.182)2418128396
jerry.ns.cloudflare.com (173.245.59.182)2418128396
jerry.ns.cloudflare.com (2606:4700:58::adf5:3bb6)2418128396
jerry.ns.cloudflare.com (2a06:98c1:50::ac40:21b6)2418128396
jerry.ns.cloudflare.com (2803:f800:50::6ca2:c1b6)2418128396
yolanda.ns.cloudflare.com (173.245.58.241)2418128396
yolanda.ns.cloudflare.com (108.162.192.241)2418128396
yolanda.ns.cloudflare.com (172.64.32.241)2418128396
yolanda.ns.cloudflare.com (2a06:98c1:50::ac40:20f1)2418128396
yolanda.ns.cloudflare.com (2803:f800:50::6ca2:c0f1)2418128396
yolanda.ns.cloudflare.com (2606:4700:50::adf5:3af1)2418128396

Checks

  • ✓ Serial 2418128396 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver jerry.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2418128396 is a Unix timestamp (2046-08-17 14:19 UTC).

DNSSEC

info

DNS query for hubspot.com failed: read udp 46.225.38.91:49602->8.8.8.8:53: i/o timeout

Checks

  • i
    Could not be checked
    The DNSSEC lookup failed, so this could not be checked: DNS query for hubspot.com failed: read udp 46.225.38.91:49602->8.8.8.8:53: i/o timeout
    #27

Records

warn

60 records at the apex

Found

Read from
172.64.33.182:53
TypeValueTTL
SOAjerry.ns.cloudflare.com. dns.cloudflare.com. 2418128396 10000 2400 604800 18001800
NSjerry.ns.cloudflare.com.86400
NSyolanda.ns.cloudflare.com.86400
A104.17.91.187300
A104.17.92.187300
AAAA2606:4700::6811:5bbb300
AAAA2606:4700::6811:5cbb300
MX1 smtp.google.com.120
TXT"DirectFedAuthUrl=https://hubspot.okta.com/app/hubspot_globalincentivessolutions_1/exk23eim59e92bAmG0h8/sso/saml"300
TXT"MS=ms42818833"300
TXT"Probely=a59314eb-85a7-45be-b13b-52794692a2b2"300
TXT"_fdv10kvw0c1o5okbdzpuy8jpqmx3sa8"300
TXT"_y7h71d1xtbahmuluh7qbx00gpvwvakj"300
TXT"adobe-idp-site-verification=67b8fd17615e71f28b3fc9b31fa84e8671d0fc28c4a80c23cef37c22f26a059e"300
TXT"apple-domain-verification=yMRAjA0cp0ZxAXJO"300
TXT"atlassian-domain-verification=9kU4xvGQ0TxzwX3dE2ZFQB4GupiUht3zfn/4MpU9qfoo9Ey6PtutBpmY4qXEI5S1"300
TXT"atlassian-domain-verification=J3f6YdOOu6/tNWzA7xI39Nqm5B5qOZ0ayDbcEHv5nntPWOkwTUQ3Fs6ha4CtCD4v"300
TXT"atlassian-domain-verification=znAKxFvnc6Sp4Vrf/Q8BIiqYFzh8awjMd8bRRibzNLriS6CnZy/sepMsnPHgVU/P"300
TXT"canva-site-verification=2q1KYRxYvE35Tv1_-IhwKQ"300
TXT"cursor-domain-verification-rwk4xw=OZwu8mpJLbNba7XK1N5NgByXg"300
TXT"detectify-verification=46f357acabb7675925ab09872da42f0e"300
TXT"docusign=b8eb1a73-67a0-4d84-9cb7-ff7955594935"300
TXT"e7f87c7be54c80bd"300
TXT"ecostruxure-it-verification=4069a037-ab55-4d70-9b8b-c7079f138604"300
TXT"elevenlabs=17AAcaYzHPb8_RC2_vYhbbaZLnH7xTDwJzyeWsbawlI"300
TXT"facebook-domain-verification=v0z7wt3tvx72qwt80eu2sf2z7zb9yi"300
TXT"figma-domain-verification=bef84396f3e4cb85b725797741f877f11d488b4c7a9cdedae83095113760926f-1779377082"300
TXT"gamma-domain-verification-nk83x4=j2pTmz5GZXYa8LBaN0fn6LkDf"300
TXT"google-site-verification=0msnYMjxgKXxDJXEIP6WB4AA2HVYl6Sz2Cy541f4ono"300
TXT"google-site-verification=125dhZzE7NHja1SJMBfKB-vGsx-WIdbQlVFXzuzUINU"300
TXT"google-site-verification=34o128itK1GOuGXGt8QI8801Nj5iRn0bfxAsfokLjOY"300
TXT"google-site-verification=4S-EduW2OFChAhn0kW_SjNR8vrLW_kQQsWp7ZuXn6Xk"300
TXT"google-site-verification=7O-Er1i7KamWdCyhOsZC2dhVEHqNxGWgrBkQ-CgOFXA"300
TXT"google-site-verification=ABe5u8RlH_DrBbo_5ldvZW2glM-SCyFy-bAirhxNjic"300
TXT"google-site-verification=J2I6jE_EJoX1m4waFuwZdKBpo7HLDNQKMfsvDUB2R4k"300
TXT"google-site-verification=J9pq_P2VWxNeuYsXn4sCdHCCTcnYPMGEjt0EjVwA85g"300
TXT"google-site-verification=P7ETKNIUHAbZHGHRwCOz3PZtuNT3JQsqGG-Ts73Ghrc"300
TXT"google-site-verification=ULhWgbGcguDpe6LuicAUc0CpIkFGccp1YmucGWoeut4"300
TXT"google-site-verification=hN2qgnvz-VyYXBoCdrN1ZU8Ye8F83DmhBJM2C0j43OE"300
TXT"google-site-verification=kJC6kA1mklSsAWS9kJ--0uRIdsMfupq6NoM3Jf2udf4"300
TXT"google-site-verification=rwNRWYjcqZUsYDG1huk_dIsBRCfOesjoHPT5wh4_5lg"300
TXT"h1-domain-verification=Xb9onaruo7KoR9XNxCyu9vUNz7rPj4uYMiteXKXLWjYs1Sy4"300
TXT"hubspot-developer-verification=MzVhYTQwYmUtN2UyZS00MGE4LWJlN2EtMzQ0NGQwNmQwNTg2"300
TXT"jamf-site-verification=_w9STFpd00fVWflCPBYyjw"300
TXT"jetbrains-domain-verification=6wsnrpm2pm69y3g6fkvkl2q7p"300
TXT"neat-pulse-domain-verification-W8XZjQX=0193c85c-892f-4ed0-986e-33199132cad8"300
TXT"notion-domain-verification=euLOro5jKUiQOYF1d4lIqxb7g6ZiuvCw2FceiUH0HXL"300
TXT"notion-domain-verification=rKp4ejOtXzT56pUPhDP055mlhuyk1WnV6sLXocG3yh1"300
TXT"onetrust-domain-verification=99a8a3a51efe4a8fbd72bd2e15a76f1e"300
TXT"openai-domain-verification=dv-G88hh2dhtm5VMPUchR7fh0l2"300
TXT"openai-domain-verification=dv-tkdJ2BeBSodzZLfRQMyFwfp7"300
TXT"perplexity-ai-domain-verification-8pz9q0=aqH5i42XX8tt9M9RUNxN3p5E0"300
TXT"pinnacle-domain-verification-zeavd3=8dL9cowZvkf90tnJid2AfYQ1x"300
TXT"smartsheet-site-validation=AacCig3iKBx3y4SHCYU0WdrlNTIIBX0D"300
TXT"status-page-domain-verification=m19bvpv5sk0s"300
TXT"stripe-verification=e499b7aac3e600c9cda9629ef657da9a1ea6cd57ce5e7e138cdeeff98419b3ff"300
TXT"v=spf1 redirect=_hspf.hubspot.com"300
TXT"yahoo-verification-key=FYzeP6zciEK4qeqdappjx5ric/+1bc0Qor1r7EncEDM="300
TXT"zapier-domain-verification-challenge=6da904b8-8498-4ea6-bc47-a7d3e3761143"300
TXT"zoom-domain-verification=ZOOM_verify_11b35b16cffa4c4894dae1d52a2ba70d"300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: MX (2m). Low TTLs are useful just before a planned change.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • i
    Wildcard record
    A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.
    #34
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35