MX record history
Look up the mail servers recorded for a domain and identify their providers from the MX hostnames. This guide explains priorities, gateways and how to compare records from different dates.
MX hostnames and priorities
In 10 mx.example.net, 10 is the preference and mx.example.net is the receiving host. Lower numbers are preferred. Several hosts often provide redundancy; they are not automatically several mailbox providers. A priority change on the same host is a routing change, not evidence of a new provider.
The history is a collection of observations, not snapshots of the full MX set. Hosts with different dates may have coexisted. Filter on MX, open the records and compare the names before interpreting the dates.
Providers this site recognises
| Provider | Role | Recognised hostnames |
|---|---|---|
| Google Workspace | Mailbox hosting | smtp.google.comaspmx.l.google.comalt1 to alt4.aspmx.l.google.com aspmx2 to aspmx5.googlemail.com |
| Microsoft 365 | Mailbox hosting | *.mail.protection.outlook.com*.mail.protection.office365.us*.mail.protection.partner.outlook.cn*.*.mx.microsoft |
| Zoho Mail | Mailbox hosting | *.zoho.com*.zoho.eu*.zoho.in*.zoho.com.au*.zoho.jp*.zohomail.com |
| OVHcloud | Mailbox hosting | *.mail.ovh.net*.mail.ovh.ca |
| Proton Mail | Mailbox hosting | *.protonmail.ch |
| Fastmail | Mailbox hosting | *.messagingengine.com |
| iCloud Mail | Mailbox hosting | *.mail.icloud.com |
| Yandex Mail | Mailbox hosting | *.mx.yandex.net*.mx.yandex.ru |
| IONOS | Mailbox hosting | *.kundenserver.de*.ionos.com*.ionos.de*.ionos.fr*.ionos.co.uk*.ionos.es*.ionos.it*.perfora.net*.1and1.com |
| Gandi | Mailbox hosting | *.gandi.net |
| Strato | Mailbox hosting | *.rzone.de |
| Infomaniak | Mailbox hosting | *.infomaniak.ch |
| GoDaddy | Mailbox hosting | *.secureserver.net |
| Namecheap Private Email | Mailbox hosting | *.privateemail.com |
| Hostinger | Mailbox hosting | *.hostinger.com*.hostinger.io |
| Rackspace Email | Mailbox hosting | *.emailsrvr.com |
| Titan Email | Mailbox hosting | *.titan.email |
| Alibaba Mail | Mailbox hosting | *.mxhichina.commx1 to mx3.qiye.aliyun.com |
| Amazon SES | Mail receiving (Amazon WorkMail or an application) | inbound-smtp.*.amazonaws.com |
| Tencent Exmail | Mailbox hosting | mxbiz1.qq.commxbiz2.qq.com |
| NetEase Enterprise Mail | Mailbox hosting | hzmx01.mxmail.netease.comhzmx02.mxmail.netease.com |
| VK WorkMail | Mailbox hosting | emx.mail.ru |
| Proofpoint | Filtering gateway | *.pphosted.com*.ppe-hosted.com |
| Mimecast | Filtering gateway | *.mimecast.com*.mimecast-offshore.com*.mimecast.co.za |
| Cisco Secure Email | Filtering gateway | *.iphmx.com |
| Barracuda | Filtering gateway | *.barracudanetworks.com |
| Trend Micro | Filtering gateway | *.trendmicro.com*.trendmicro.eu |
| Sophos | Filtering gateway | *.hydra.sophos.com |
| Hornetsecurity | Filtering gateway | *.hornetsecurity.com |
| Forcepoint | Filtering gateway | *.mailcontrol.com |
| Broadcom Email Security | Filtering gateway | *.messagelabs.com |
| Namecheap Jellyfish | Filtering gateway | *.jellyfish.systems |
| Cloudflare Email Security | Filtering gateway | mailstream-*.mxrecord.iomailstream-*.mxrecord.mxmailstream-*.area1.cloudflare.net*.*.inbound.cf-emailsecurity.net |
| Cloudflare Email Routing | Forwarding | *.mx.cloudflare.net |
| ImprovMX | Forwarding | *.improvmx.com |
| Mailgun | Forwarding | mxa.mailgun.orgmxb.mailgun.orgmxa.eu.mailgun.orgmxb.eu.mailgun.org |
A provider is named only when the whole hostname matches one of these patterns; *. stands for zero or more host labels. A hostname such as google.com.example.net does not match. Case and a final dot do not change a match. Other hostnames stay unclassified. The dates shown with a provider are when the source first recorded each value, not when a service started or stopped.
A filtering gateway receives mail first and passes it on to mailboxes hosted elsewhere, often Microsoft 365 or Google Workspace. A forwarding service relays mail to another address or to an application. Google hostnames ending in mx-verification.google.com and Microsoft hostnames ending in msv1.invalid prove domain ownership and do not receive mail, so they are never named. Nor are hostnames ending in norelay.stc.com.sa: this Saudi Telecom name did not resolve on 2026-10-17 and appears in the history of unrelated domains.
Google Workspace: two MX formats for one service
Google documents smtp.google.com with priority 1 for its current Workspace setup. Accounts set up before 2023 may use the older aspmx values, which remain supported. A history containing both formats can therefore still refer to Google Workspace.
| MX hostname | Interpretation |
|---|---|
aspmx.l.google.com | Part of the legacy Google Workspace setup |
smtp.google.com | The current Google Workspace setup |
Both hostnames match the Google Workspace patterns used by this site. Compare their recorded dates to see which values appear in the sample, then query current MX records to see what is published now. The first date attached to the new hostname cannot establish when mail delivery changed.
For the supported values and setup instructions, see Google Workspace MX documentation.
Comparing mail providers over time
- Different providers at different dates: check the other records for a possible mail-routing change. The dates alone cannot confirm a migration. See the example with Microsoft and OVHcloud.
- Different hosts from the same provider: Google uses both
aspmxandsmtp.google.comformats. Microsoft also uses two MX families. Either provider can change its hostnames while continuing to handle the domain’s mail. - A gateway appears: a domain may add a filtering service while keeping its existing mailboxes.
- Several services appear: they may have been used during a transition, for parallel delivery or at different times. The rows are historical observations collected separately.
Checking SPF alongside MX
Compare the TXT and SPF records around the MX dates. For example, a Proofpoint MX and a Microsoft SPF include could mean that Proofpoint receives mail while Microsoft sends it. SPF only lists authorised senders, so it cannot confirm where the mailboxes are hosted.
Null MX and missing MX records
0 . is a null MX: the domain explicitly says it accepts no email. A missing MX row in this history only means none was returned. Even an actual DNS answer with no MX is different: SMTP has an implicit fallback to the domain’s address records. See RFC 7505 and RFC 5321 §5.1.
Checking current MX records
Run dig @1.1.1.1 example.com MX to inspect a current resolver answer. If you administer the domain, compare it with the provider’s assigned MX hosts and your authoritative zone. Historical hostnames should not be copied into production without checking the active account configuration.
Frequently asked questions
How do I find out which email provider a domain used before?
Match its MX hosts against the table above. The oldest MX rows give the earliest provider among the 50 results; if the counter shows more observations, an older provider may be among the rest.
When did a domain change its MX records?
Each value has the date it was first recorded. This sample does not show when the old MX hosts stopped accepting mail, so it cannot confirm the date of a switch.
Why does mail still reach the old server after an MX change?
Senders can have cached the old MX answer, and already-queued mail may be retried. Check TTLs, mail queues and routing configuration; keep the old service available for the transition agreed with your provider.
What does an MX record of "0 ." mean?
It is a null MX (RFC 7505): the domain accepts no mail at all. It is common on domains that send and receive no mail, usually next to v=spf1 -all and a DMARC reject policy.
Can I see other domains that use the same mail server?
Yes. Open an MX row and follow the Profundis link, which searches for other domains whose records point to that host.