GOHIGHLEVEL ANSWERS & PROMPTS: PLAYBOOK T05 · DELIVERABILITY & DNS
AUTHOR: DANIEL HALLMAN
KEYWORD: DNS
What Usually Happens
Pasting `link.agency.com` into GoDaddy or Namecheap's Host box silently creates `link.agency.com.agency.com`, causing HighLevel SSL provisioning to hang for days.
How We Fix It in HighLevel
Pass only the relative host label (`link`), set Cloudflare CNAMEs to DNS-Only (grey cloud) so LeadConnector can issue the SSL certificate, and publish a clean DMARC record starting at `p=none` before moving to `p=quarantine`.
3-Step Implementation Checklist
- In GoDaddy, Namecheap, or Cloudflare DNS, type only the subdomain prefix (`link`, `go`, or `mail`) into the Host/Name field—never append the root domain.
- Turn off Cloudflare's orange proxy cloud (set to Grey Cloud / DNS Only) on HighLevel funnel and LC Email CNAME records so SSL verification succeeds immediately.
- Add a `_dmarc` TXT record (`v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com;`) alongside your LC Email SPF and DKIM records.
MODE: AGENT PROMPT
PASTE THIS PROMPT INTO CLAUDE CODE, CURSOR, CHATGPT, OR YOUR GHL ASSISTANT
SAFE READ-FIRST WORKFLOW
Inspect the DNS records for our GoHighLevel client domain and fix any CNAME or DMARC issues: 1. Check if the funnel or tracking CNAME has a duplicated root domain (e.g. link.domain.com.domain.com) or an active Cloudflare proxy blocking SSL verification. 2. Verify that SPF, DKIM, and _dmarc TXT records are published and aligned for the LC Email sending subdomain. 3. Output the exact host labels and target values to paste into Cloudflare or GoDaddy.
RUN WITH OUR GHL-TOOLS MCP SERVER OR RUST CLI (DANIELHALLMAN.COM/MCP)
SUPPORTS --DRY-RUN PREVIEW
# 1. MCP Tool Call (ghl-onboard-mcp)
{
"tool": "dns_plan_cutover",
"arguments": {
"domain": "clientdomain.com",
"funnel_host": "go",
"mail_host": "mail",
"verify_rfc1035": true,
"dry_run": true
}
}
# 2. Or run via ghl-onboard Rust CLI
ghl-onboard dns check --domain clientdomain.com
Similar GoHighLevel Questions & Fixes
PLAYBOOK T05 · Deliverability & DNS
How do you get GoHighLevel A2P 10DLC campaign registration approved on the first try?
Verify that your intake form has an unchecked SMS consent checkbox displaying your exact legal business name, a live Privacy Policy link with no redirects, and matching EIN documentation before submitting.
PLAYBOOK T12 · Deliverability & DNSHow do you keep cold email separate from your main business domain in GoHighLevel?
Keep your primary root domain strictly for opted-in clients, billing, and calendar invites, and run cold outreach from 2–3 secondary domains capped at 30 plain-text emails per inbox per day.
PLAYBOOK T12 · Deliverability & DNSHow do you isolate custom tracking domains in GoHighLevel so links don't trigger spam filters?
Create a dedicated CNAME tracking subdomain matching your sending domain, disable open-tracking pixels on first-touch outbound emails, and keep your root business domain separate.
PLAYBOOK T13 · SaaS Mode & SnapshotsHow do you onboard a new GoHighLevel agency client in 45 minutes instead of a 3-week form?
Skip the 40-question onboarding form: run one 45-minute live Zoom sprint right after payment to connect DNS, Google Business Profile, and call forwarding on the spot.
RUN THIS IN 30 SECONDS · GHL-TOOLS MCP + OPERATOR COMMUNITY
Want your AI agent to inspect and build this inside GoHighLevel automatically?
Connect Claude Code, Cursor, or OpenAI Codex to our ghl-tools MCP Server & Rust CLI for 30-second sub-account doctor checks, --dry-run previews, and snapshot diffs—or start/upgrade your GoHighLevel plan through our partner link to unlock up to $612+ in implementation kits (including Deliverability, DNS & Apple Branded Mail Pack ($47 — or Free with Trial)) and our weekly live engineering clinics.