How to Check Which Email Provider a Prospect Uses, and Why It Matters

To check which email provider a prospect uses, look up the MX records for their company domain. If the MX hosts end in google.com, they use Google Workspace; if they end in mail.protection.outlook.com, they use Microsoft 365. If the MX points to a security gateway such as Proofpoint or Mimecast, the domain's SPF record usually shows the provider behind it.

It takes seconds for one domain and a minute for a list. The more useful question is what to do with the answer, because the provider changes how your mail is filtered, how reliable verification is, and how you should read your results.

Reading MX records

MX records name the servers that accept mail for a domain, and the hostnames give the provider away. Common patterns:

MX host pattern	What it means
aspmx.l.google.com, *.aspmx.l.google.com, smtp.google.com	Google Workspace
*.mail.protection.outlook.com	Microsoft 365
*.pphosted.com	Proofpoint gateway
*.mimecast.com	Mimecast gateway
*.barracudanetworks.com	Barracuda gateway
mx.zoho.com, mx.zoho.eu	Zoho Mail
*.protonmail.ch	Proton Mail
The company's own hostname	Self-hosted, or a gateway behind a custom name

When a gateway sits in front, look at the SPF record. A gateway company that sends through Microsoft 365 will usually include spf.protection.outlook.com; one on Google will include _spf.google.com.

You can do this by hand with the MX lookup, or let the email provider lookup read both records and name the provider and any gateway for you.

Personal addresses versus company domains

The same lookup separates consumer mailboxes from business ones. An address at gmail.com has MX records at gmail-smtp-in.l.google.com, which is Google's consumer service, while a company on Google Workspace uses its own domain with Google's business MX hosts. Microsoft's consumer domains, outlook.com, hotmail.com and live.com, are similarly distinct from a company domain hosted on Microsoft 365.

That distinction matters for cold email. A B2B list that contains personal addresses is mixing two audiences with different expectations, and Gmail's bulk-sender count only includes mail to personal Gmail accounts. If your list should only contain work addresses, the free vs business email filter separates them before you look at providers. Our post on telling a business email from a personal one covers the edge cases.

Checking a whole list

For a lead list, upload the CSV to the bulk MX / provider lookup. It reads MX and SPF for every domain and labels each row Google, Microsoft, Yahoo, Zoho, Proton or other, then lets you download the list split by provider. Domains are looked up once each, so a list with many contacts at the same company is quick.

Why the provider matters

Filtering and requirements differ

Gmail and Outlook judge your mail separately, and each publishes its own rules. Google's email sender guidelines and Microsoft's requirements for high-volume senders to Outlook.com are similar in spirit but not identical, and the business products, Google Workspace and Microsoft 365, add each customer's own filtering settings on top. A campaign that lands well at Google-hosted companies can struggle at Microsoft-hosted ones, and the other way round.

If you send to both, split your reporting. A falling reply rate that only appears at Microsoft-hosted domains points to a filtering problem there, not to your copy. Our guide to segmenting a list by mailbox provider covers how to pace and report per provider.

Verification reliability differs

The provider predicts how much a verification result can tell you. Some mail servers answer a mailbox check honestly, rejecting addresses that do not exist. Others accept every address at the server and decide later, which makes the domain look catch-all. Security gateways often add their own behaviour, such as accepting everything or deferring unknown senders.

That means a list heavy in gateway-protected domains will come back with more catch-all and unknown results, however good your verifier is. Our post on verifying emails behind Proofpoint, Mimecast and Barracuda explains why, and Outlook and Hotmail verification covers the Microsoft side.

It tells you about the company

A domain with no MX records cannot receive email at all, so every address on it will bounce. A domain on a free consumer provider is not a company domain. And a company that moved from one provider to another recently may have stale addresses that bounce. Our post on checking if a domain can receive email covers the no-MX case.

A practical workflow

1. Extract the domains from your lead list with the email to domain extractor.
2. Label each domain's provider with the bulk lookup above.
3. Remove domains with no MX. Nothing sent there can arrive.
4. Verify the addresses and note the share of catch-all and unknown results per provider.
5. Plan sends per provider. Start each campaign with a small batch to each provider group and compare results before scaling.
6. Report per provider so a problem at one shows up early.

What the provider does not tell you

The MX record says who receives mail for the domain. It does not say whether jane.doe@ exists there, whether Jane still works at the company, or whether the domain accepts every address. Those need a mailbox check, and for catch-all domains even that cannot give a definite answer. See what is a catch-all domain.

The takeaway

Provider lookup is quick and free, and it changes how you read everything else: filter behaviour, verification results and per-provider reporting. Do it before the first send, not after a bad week.

Once the domains are sorted, SimpleVerifier runs a live mailbox check on every address and labels catch-all and role addresses separately. The first 100 email checks are free with a Google sign-in, and monthly plans are on the pricing page.