Mail exchanger lookup

The MX Lookup That Shows a Domain's Mail Provider.

Enter any domain to read its mail exchanger records in priority order, see the mail server behind them, and know whether the domain accepts email.

Free to run. No signup — public DNS data.

Trusted by 500,000+ leading GTM teams of all sizes

From domain to mail records

How the MX lookup works

No login, no install. Enter any domain to resolve its MX records in priority order, identify the mail provider, and confirm it accepts email.

001DOMAIN

Enter a domain

Drop in any domain you want to inspect — a company's, a competitor's, or your own. No login, no account, nothing to install; a single domain is all the lookup needs to start.

002QUERY

Query the DNS records

Verifox runs a live DNS query for the domain's MX records, the same mail-routing resolution the verification engine performs before it ever touches a mailbox, resolved over encrypted DNS-over-HTTPS.

003READ

Read the mail routing

See the MX records in priority order, the provider that runs the mail, and whether the domain accepts mail at all — the routing signal a deliverability check starts from.

The plain-English version

What a mail exchanger lookup actually tells you

One question of a domain's DNS: which mail servers does it trust, and in what order?

A mail exchanger lookupreads a domain's MX records, the DNS entries that decide where its email is delivered, each naming a mail server and a priority number. The hostnames reveal the provider: aspmx.l.google.com means Google Workspace, mail.protection.outlook.commeans Microsoft 365, and a custom host usually means a self-hosted or niche setup. The priority numbers show the routing, lowest number first and higher ones as fallbacks. In a single pass you learn who runs a domain's mail and whether it can receive any at all.

The 9-point engine

Nine checks, one verdict

The same nine-check engine our paid email verification API runs. Every email, every verification, every time.

  1. 01

    Syntax

    Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.

    Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Syntax tile is ringed in the nine-check result board, beside a card showing the parse of matthamnett @ avencera.ai against RFC 5321 and RFC 5322, verdict “Valid format”.
  2. 02

    Domain & MX

    Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.

    Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the MX Record tile is ringed in the result board, beside a card showing the real MX 0 record avencera-ai.mail.protection.outlook.com on Microsoft 365, verdict “MX record found”.
  3. 03

    SMTP handshake

    The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.

    This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the SMTP Connect tile is ringed in the result board, beside a card showing the EHLO → MAIL FROM → RCPT TO exchange and the server’s 250 2.1.5 Recipient OK reply, verdict “Mailbox proven”.
  4. 04

    Catch-all detection

    Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.

    The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Catch-All tile is ringed in the result board, beside a card comparing the real address (250 OK) with a deliberately fake probe (550 rejected), verdict “Validates recipients”.
  5. 05

    Disposable

    The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.

    Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Disposable tile is ringed in the result board, beside a card showing the 10,247-provider throwaway blocklist and no match for avencera.ai, verdict “Legitimate domain”.
  6. 06

    Role address

    info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.

    The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.

    You don't drop them automatically. The verdict flags them as roles so you can decide.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Role Address tile is ringed in the result board, beside a card matching the local-part matthamnett against the info@ / support@ / no-reply@ / admin@ role registry with no match, verdict “Personal address”.
  7. 07

    Domain age

    Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.

    Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Domain Age tile is ringed in the result board, beside a card showing the WHOIS creation date 2025-07-10 against the 30-day fresh-spam threshold, verdict “1y old”.
  8. 08

    Email authentication

    SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.

    The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.

    A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the DMARC tile is ringed in the result board, beside a card showing the real SPF include, DKIM selector1/selector2 and DMARC p=reject records, verdict “Aligned & enforcing”.
  9. 09

    Mailbox state

    Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.

    Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Inbox Exists tile is ringed in the result board, beside a card showing the live 250 2.1.5 active reply against the full-inbox and disabled states that drive retry policy, verdict “Inbox confirmed”.
What it tells you

What an MX lookup reveals about a domain

An MX lookup is a read-only window into how a domain receives email. In one query you learn who runs the mail, how it routes, and if its sendable

Verification engine
9

checks on every
address

The same DNS resolution the Verifox verification engine runs first on every address it checks.

Who runs the mail

The MX hosts name the provider — Google Workspace, Microsoft 365, Proofpoint, or a self-hosted server.

Routing and priority

Records return lowest-number-first, so you read the primary server and its fallbacks straight away.

A deliverability signal

No MX record, or a broken one, means mail bounces before it is ever sent.

The first deliverability step

An MX lookup starts the story; verifying the address confirms the mailbox itself is real.

Verify the mailbox itself

An MX lookup is only the first step. Verifying the address confirms the mailbox is real and deliverable.

Verify an address — free

Provider at a glance

The single most useful thing a mail exchanger lookup tells you — who to talk to about mail.

How we stack up

Verifox vs other
MX lookup tools

MXToolbox, DNSChecker, and Google Toolbox all return MX records. Verifox names the provider in plain English and verifies the mailbox.

★ The complete lookupVerifox
MXToolbox
DNSChecker
Google Toolbox
MXToolboxHostnames
DNSCheckerHostnames
Google ToolboxHostnames
MXToolbox
DNSChecker
Google Toolbox
MXToolbox
DNSChecker
Google Toolbox
MXToolbox
DNSChecker
Google Toolbox
MXToolbox
DNSChecker
Google Toolbox
MXToolbox
DNSChecker
Google Toolbox
MXToolboxSubscription
DNSCheckerFree
Google ToolboxFree
Pricing

Pay once, or not at all

Most tools reset your balance every month. Verifox sells credits that sit in your account until you spend them.

FreeProve it on your own list before you spend anything.$0

forever

1,000credits on signup

No card required

2,500 with a work email

Free includes

  • All 9 checks included
  • Full API and bulk CSV
  • Catch-all confidence scoring
  • No card required
Most popular
Credit packsBuy once, spend whenever. Slide to price your list.$59

one time

10,000credits

$0.0059 eachSAVE 34%

Everything in Free, plus

  • Credits never expire
  • Verify or find from one pool
  • Up to 79% off at volume
  • No contract, no minimum
Verifox ONECredits land monthly and stack on your balance.$79

per month

15,000credits a month

$0.0053 each

Unused credits roll over

Everything in packs, plus

  • Unused credits roll over
  • Our lowest per-email rate
  • 50 requests per second API
  • Cancel anytime

One credit verifies one address; a find costs 10. All prices in USD, checkout via Stripe.

What teams are saying

Built for the teams that ship outbound

Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

Thomas George, GTM Lead at Stripe

90% lower bill, 0.4% bounces

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.
Thomas G.GTM Lead, Stripe
Brittany King, GTM Lead at HubSpot

Catch-all finally has a verdict

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.
Brittany K.GTM Lead, HubSpot
Dale Micallef, GTM Lead at Slack

Reputation rebuilt in 6 weeks

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.
Dale M.GTM Lead, Slack
Erica Kovalkoski, GTM Lead at Discord

0.7% bounce on 50k

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.
Erica K.GTM Lead, Discord
Greg Lindsay, GTM Lead at OpenAI

MCP in 10 minutes

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.
Greg L.GTM Lead, OpenAI
Rini Vasana, Product Manager at Vercel

10k/min held under 400ms

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.
Rini V.Product Manager, Vercel
Jonathan Aharon, GTM Lead at MongoDB

Hygiene that doesn't break pipeline

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.
Jonathan A.GTM Lead, MongoDB
Emma Fox, GTM Lead at Linear

Bulk that actually ships

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.
Emma F.GTM Lead, Linear
David Hare, GTM Lead at Snowflake

Scores you can act on

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
David H.GTM Lead, Snowflake
Trust & compliance

Enterprise-grade security and scale

Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

  • Claymation Japanese hanko seal in jade-green clay with a twisted shimenawa rope rim, the words SOC 2 TYPE II embossed in cream clay on its face.

    SOC 2 Type II

    Independently audited to the SOC 2 Type II standard.

  • Claymation Japanese hanko seal in cobalt-blue clay with a twisted shimenawa rope rim, the word GDPR embossed in cream clay on its face.

    GDPR

    Built for the EU with full GDPR data-subject rights.

  • Claymation Japanese hanko seal in rose-pink clay with a twisted shimenawa rope rim, the word CCPA embossed in cream clay on its face.

    CCPA

    California opt-out, do-not-sell, plus DSAR handling.

  • Claymation Japanese hanko seal in terracotta clay with a twisted shimenawa rope rim, the text ISO 27001 embossed in cream clay on its face.

    ISO 27001

    Information security held to the ISO 27001 standard.

  • Claymation Japanese hanko seal in lilac-purple clay with a twisted shimenawa rope rim, the text ISO 42001 embossed in cream clay on its face.

    ISO 42001

    AI governance aligned to the new ISO 42001 standard.

Free field manual

The Dead List

An investigation into the money leaking out of your list - and the nine checks that decide whether your email is read, or never arrives at all.

The Dead List field manual, held up by the Verifox fox
Get the free manual

57 pages, free PDF, no signup

Common questions

MX lookups, answered.

Common questions about MX records: what the priority numbers mean, why a lookup returns nothing, and how MX records connect to deliverability.

What is an MX lookup?

An MX lookup, or mail exchanger lookup, queries a domain's DNS for its MX records, the entries that say which servers are responsible for receiving email for that domain. Type a domain into the tool above and Verifox reads those records back in priority order.

It answers three questions at once: does this domain accept mail, which provider runs it, and in what order servers are tried — the same DNS resolution our verification engine performs before it touches a mailbox.

What is an MX record?

A mail exchange record (MX record) is a DNS entry that points a domain's email to a mail server. Each record carries a hostname and a priority number, and a domain can publish several so there are backups if the primary server is unreachable.

The priority is a preference value: the lowest number is tried first. So a record at priority 1 is the primary mail server, and higher numbers are fallbacks. The format is defined in RFC 5321, and the MX lookup above lists them in that exact order.

How do I look up the MX records for a domain?

The simplest way is to paste the domain into the lookup above and read the records back. No account, no install. You can also run nslookup -type=mx example.com or dig example.com MX in a terminal, but those return raw hostnames you have to interpret yourself.

Verifox names the mail provider in plain English, not just the hostnames, and flows into a real mailbox verification when you need to go past routing. Configuring a mail client? The IMAP and SMTP settings come from the same DNS records.

What does the MX lookup tell me about a domain?

Three things. First, who runs the mail, the MX hosts reveal whether a domain is on Google Workspace, Microsoft 365, Proofpoint, or a self-hosted server. Second, how mail routes, the priority order shows the primary server and its fallbacks. Third, whether mail is accepted at all.

A domain with no MX record cannot receive email, an instant red flag for deliverability. To confirm a specific address is reachable, the mailbox itself has to be checked — a step no lookup alone can do.

What does a failed MX lookup or MX lookup error mean?

A failed MX lookup usually means one of two things: the domain publishes no MX records, so it cannot receive email, or the domain itself does not resolve (a typo, an expired registration, or a DNS misconfiguration). Either way, mail to it bounces.

Some domains intentionally route mail without MX records, but for most, a missing MX means mail bounces. If the records look right but mail still fails, run an SMTP test against the server or check SPF, DKIM, and DMARC on the same domain.

Can I look up MX records for many domains in bulk?

Yes. The single lookup above is free with no account. For a list of domains, the REST API runs the same MX resolution as part of every verification call, so you can read the mail records behind a whole list of domains programmatically.

Bulk checks run on the same pay-as-you-go credits as the rest of the platform, localized to your region, and those credits never expire.

Is the MX lookup the same as verifying an email address?

No, and the difference matters. An MX lookup checks the domain, can it receive mail at all, and who runs it. Verifying an email checks the specific mailbox, does [email protected] actually exist and accept mail.

A domain can have perfect MX records while a given address on it is dead. That is why the MX lookup is step one of deliverability and the free email checker is step two. Verifox runs both on the same engine.

Does Verifox store the domains I look up?

No. The domain you enter is resolved in memory and discarded the moment the lookup completes. Nothing logged, nothing retained, nothing sold. A domain's MX records are public DNS data, but your queries are still yours.

Verifox is SOC 2 Type II compliant and GDPR ready. All queries run over encrypted DNS-over-HTTPS and nothing is retained after the lookup completes. Read the privacy policy for the full breakdown of what we log and what we do not.

Can I run an MX lookup from my own app or AI agent?

Yes. Every call documented in the REST API reference runs the MX resolution as its first stage and reports the domain-level result, so you can wire mail-server checks into your CRM, your onboarding flow, or any tool that speaks REST.

Verifox also ships native MCP server support, so AI agents (Claude, Cursor, custom LLM apps) can look up a domain's mail records and verify addresses without glue code. Live uptime at status.verifox.ai is public for anyone auditing reliability.

How often do MX records change?

For most domains, rarely. Moving from one mail provider to another, say Google Workspace to Microsoft 365, is the main reason records change, and even then the switch typically happens over a few hours as the DNS TTL expires. Day-to-day, the records are stable.

A sudden MX change on a domain you send to can mean it migrated providers, expired and was re-registered, or was compromised. Periodic mail domain lookups on high-value domains catch provider changes before they affect your bounce rate.

What it tells you

What an MX lookup reveals about a domain

An MX lookup is a read-only window into how a domain receives email. In one query you learn who runs the mail, how it routes, and if its sendable

Verification engine
9

checks on every
address

The same DNS resolution the Verifox verification engine runs first on every address it checks.

Who runs the mail

The MX hosts name the provider — Google Workspace, Microsoft 365, Proofpoint, or a self-hosted server.

Routing and priority

Records return lowest-number-first, so you read the primary server and its fallbacks straight away.

A deliverability signal

No MX record, or a broken one, means mail bounces before it is ever sent.

The first deliverability step

An MX lookup starts the story; verifying the address confirms the mailbox itself is real.

Verify the mailbox itself

An MX lookup is only the first step. Verifying the address confirms the mailbox is real and deliverable.

Verify an address — free

Provider at a glance

The single most useful thing a mail exchanger lookup tells you — who to talk to about mail.