Domain Email DoctorScan my domain

Fix your custom domain email setup.

Check MX, SPF, DKIM, and DMARC records for Google Workspace, Cloudflare, Vercel, Namecheap, Microsoft 365, and more.

Scan my domainHow it works
No login neededPublic DNS onlyWe do not modify DNSNo email password needed
Example report

example.com

6/1/2026, 9:00:00 AM

Critical issues found59/100
MX recordsReceiving mail servers found2 MX records returned.
SPF recordSPF allows every senderSPF helps receiving mail servers decide whether outgoing mail is authorized.
DKIM recordCommon DKIM selector foundFound one or more common DKIM selectors. Your provider may use others too.
DMARC recordDMARC policy is p=noneDMARC tells receivers what to do when SPF or DKIM authentication fails.

Results report preview

Deterministic DNS findings. This checks DNS configuration, not inbox placement or sender reputation.

CheckStatusDetailsAction
Who controls your DNS?passCloudflare DNSAdd fixes wherever these nameservers are managed.
MX recordspassReceiving mail servers foundKeep these MX records aligned with your email provider.
SPF recordfailSPF allows every senderFor Google Workspace, keep include:_spf.google.com and replace +all with ~all while testing or -all after every sender is confirmed.
DKIM recordpassCommon DKIM selector foundUse your mail provider admin panel to confirm the exact DKIM selector and public key.
DMARC recordwarningDMARC policy is p=noneAfter reviewing reports, move gradually from p=none to p=quarantine and then p=reject.
Website hostpassVercel HostingDo not add mail records at your website host unless it also controls your DNS.

Exact fixes

critical
SPF allows every sender

For Google Workspace, keep include:_spf.google.com and replace +all with ~all while testing or -all after every sender is confirmed.

Read the SPF guidev=spf1 include:_spf.google.com +all
low
DMARC policy is monitoring only

After reviewing reports, move gradually from p=none to p=quarantine and then p=reject.

Read the DMARC guidev=DMARC1; p=none; rua=mailto:dmarc@example.com
Raw DNS evidence
{
  "ns": [
    "ada.ns.cloudflare.com",
    "ben.ns.cloudflare.com"
  ],
  "mx": [
    {
      "priority": 1,
      "exchange": "aspmx.l.google.com"
    },
    {
      "priority": 5,
      "exchange": "alt1.aspmx.l.google.com"
    }
  ],
  "txt": [
    {
      "name": "@",
      "value": "v=spf1 include:_spf.google.com +all"
    },
    {
      "name": "_dmarc",
      "value": "v=DMARC1; p=none; rua=mailto:dmarc@example.com"
    },
    {
      "name": "google._domainkey",
      "value": "v=DKIM1; k=rsa; p=abc"
    }
  ],
  "cname": {
    "www": [
      "cname.vercel-dns.com"
    ]
  },
  "a": {
    "@": [
      "76.76.21.21"
    ]
  },
  "aaaa": {}
}

Common problems

I cannot receive email
My website works but email does not
My emails go to spam
Google Workspace says my domain is not verified
I added records in Vercel but nothing changed

What the app checks

Active DNS host
MX records
SPF
DKIM
DMARC
Conflicting records

Who it is for

FoundersSmall business ownersFreelancersAgenciesGoogle Workspace adminsMicrosoft 365 admins

Built for people who need exact DNS fixes without learning every mail-authentication acronym first.

Practical next steps

Each report separates DNS hosting, website hosting, and email hosting so you know where to add or change records.

View guides