MX record history

Look up the mail servers recorded for a domain and identify their providers from the MX hostnames. This guide explains priorities, gateways and how to compare records from different dates.

DNS guides · Reviewed

MX hostnames and priorities

In 10 mx.example.net, 10 is the preference and mx.example.net is the receiving host. Lower numbers are preferred. Several hosts often provide redundancy; they are not automatically several mailbox providers. A priority change on the same host is a routing change, not evidence of a new provider.

The history is a collection of observations, not snapshots of the full MX set. Hosts with different dates may have coexisted. Filter on MX, open the records and compare the names before interpreting the dates.

Providers this site recognises

ProviderRoleRecognised hostnames
Google WorkspaceMailbox hostingsmtp.google.com
aspmx.l.google.com
alt1 to alt4.aspmx.l.google.com
aspmx2 to aspmx5.googlemail.com
Microsoft 365Mailbox hosting*.mail.protection.outlook.com
*.mail.protection.office365.us
*.mail.protection.partner.outlook.cn
*.*.mx.microsoft
Zoho MailMailbox hosting*.zoho.com
*.zoho.eu
*.zoho.in
*.zoho.com.au
*.zoho.jp
*.zohomail.com
OVHcloudMailbox hosting*.mail.ovh.net
*.mail.ovh.ca
Proton MailMailbox hosting*.protonmail.ch
FastmailMailbox hosting*.messagingengine.com
iCloud MailMailbox hosting*.mail.icloud.com
Yandex MailMailbox hosting*.mx.yandex.net
*.mx.yandex.ru
IONOSMailbox hosting*.kundenserver.de
*.ionos.com
*.ionos.de
*.ionos.fr
*.ionos.co.uk
*.ionos.es
*.ionos.it
*.perfora.net
*.1and1.com
GandiMailbox hosting*.gandi.net
StratoMailbox hosting*.rzone.de
InfomaniakMailbox hosting*.infomaniak.ch
GoDaddyMailbox hosting*.secureserver.net
Namecheap Private EmailMailbox hosting*.privateemail.com
HostingerMailbox hosting*.hostinger.com
*.hostinger.io
Rackspace EmailMailbox hosting*.emailsrvr.com
Titan EmailMailbox hosting*.titan.email
Alibaba MailMailbox hosting*.mxhichina.com
mx1 to mx3.qiye.aliyun.com
Amazon SESMail receiving (Amazon WorkMail or an application)inbound-smtp.*.amazonaws.com
Tencent ExmailMailbox hostingmxbiz1.qq.com
mxbiz2.qq.com
NetEase Enterprise MailMailbox hostinghzmx01.mxmail.netease.com
hzmx02.mxmail.netease.com
VK WorkMailMailbox hostingemx.mail.ru
ProofpointFiltering gateway*.pphosted.com
*.ppe-hosted.com
MimecastFiltering gateway*.mimecast.com
*.mimecast-offshore.com
*.mimecast.co.za
Cisco Secure EmailFiltering gateway*.iphmx.com
BarracudaFiltering gateway*.barracudanetworks.com
Trend MicroFiltering gateway*.trendmicro.com
*.trendmicro.eu
SophosFiltering gateway*.hydra.sophos.com
HornetsecurityFiltering gateway*.hornetsecurity.com
ForcepointFiltering gateway*.mailcontrol.com
Broadcom Email SecurityFiltering gateway*.messagelabs.com
Namecheap JellyfishFiltering gateway*.jellyfish.systems
Cloudflare Email SecurityFiltering gatewaymailstream-*.mxrecord.io
mailstream-*.mxrecord.mx
mailstream-*.area1.cloudflare.net
*.*.inbound.cf-emailsecurity.net
Cloudflare Email RoutingForwarding*.mx.cloudflare.net
ImprovMXForwarding*.improvmx.com
MailgunForwardingmxa.mailgun.org
mxb.mailgun.org
mxa.eu.mailgun.org
mxb.eu.mailgun.org

A provider is named only when the whole hostname matches one of these patterns; *. stands for zero or more host labels. A hostname such as google.com.example.net does not match. Case and a final dot do not change a match. Other hostnames stay unclassified. The dates shown with a provider are when the source first recorded each value, not when a service started or stopped.

A filtering gateway receives mail first and passes it on to mailboxes hosted elsewhere, often Microsoft 365 or Google Workspace. A forwarding service relays mail to another address or to an application. Google hostnames ending in mx-verification.google.com and Microsoft hostnames ending in msv1.invalid prove domain ownership and do not receive mail, so they are never named. Nor are hostnames ending in norelay.stc.com.sa: this Saudi Telecom name did not resolve on 2026-10-17 and appears in the history of unrelated domains.

Google Workspace: two MX formats for one service

Google documents smtp.google.com with priority 1 for its current Workspace setup. Accounts set up before 2023 may use the older aspmx values, which remain supported. A history containing both formats can therefore still refer to Google Workspace.

Documented formats, not observations from a domain lookup
MX hostnameInterpretation
aspmx.l.google.comPart of the legacy Google Workspace setup
smtp.google.comThe current Google Workspace setup

Both hostnames match the Google Workspace patterns used by this site. Compare their recorded dates to see which values appear in the sample, then query current MX records to see what is published now. The first date attached to the new hostname cannot establish when mail delivery changed.

For the supported values and setup instructions, see Google Workspace MX documentation.

Comparing mail providers over time

Checking SPF alongside MX

Compare the TXT and SPF records around the MX dates. For example, a Proofpoint MX and a Microsoft SPF include could mean that Proofpoint receives mail while Microsoft sends it. SPF only lists authorised senders, so it cannot confirm where the mailboxes are hosted.

Null MX and missing MX records

0 . is a null MX: the domain explicitly says it accepts no email. A missing MX row in this history only means none was returned. Even an actual DNS answer with no MX is different: SMTP has an implicit fallback to the domain’s address records. See RFC 7505 and RFC 5321 §5.1.

Checking current MX records

Run dig @1.1.1.1 example.com MX to inspect a current resolver answer. If you administer the domain, compare it with the provider’s assigned MX hosts and your authoritative zone. Historical hostnames should not be copied into production without checking the active account configuration.

Frequently asked questions

How do I find out which email provider a domain used before?

Match its MX hosts against the table above. The oldest MX rows give the earliest provider among the 50 results; if the counter shows more observations, an older provider may be among the rest.

When did a domain change its MX records?

Each value has the date it was first recorded. This sample does not show when the old MX hosts stopped accepting mail, so it cannot confirm the date of a switch.

Why does mail still reach the old server after an MX change?

Senders can have cached the old MX answer, and already-queued mail may be retried. Check TTLs, mail queues and routing configuration; keep the old service available for the transition agreed with your provider.

What does an MX record of "0 ." mean?

It is a null MX (RFC 7505): the domain accepts no mail at all. It is common on domains that send and receive no mail, usually next to v=spf1 -all and a DMARC reject policy.

Can I see other domains that use the same mail server?

Yes. Open an MX row and follow the Profundis link, which searches for other domains whose records point to that host.

The remaining observations, filters, exports and the API are on Profundis.io →