Check your domain's Google Workspace MX records

Paste any address at your domain to see if its MX records point at Google Workspace, in the current form or the older aspmx one.

Try:

Only the domains are sent, to Cloudflare's public DNS. Nothing is stored.

Google Workspace MX recordsGoogle Workspace uses one MX record. Domains set up before 2023 may still have older values that start with aspmx. Google says they still work, and that a working setup needs no change.
  • smtp.google.comPriority 1The current value
  • Values that start with aspmxOlder domains (before 2023). Still supported.

Source: knowledge.workspace.google.com (opens in a new tab). Checked Nov 10, 2026.

How the map reads MX records

Microsoft 365 MX record

Microsoft 365 uses one MX record that points to a host named for your domain. Find your MX token in the Microsoft 365 admin center, under Domains. Give it the lowest preference number, and remove MX records that point to the old mail system once mail flows. Microsoft is moving these hosts to subdomains under mx.microsoft, for domains that turn on DNSSEC and for part of new domains from July 1, 2026.

  • <MX token>.mail.protection.outlook.comPriority 0 or 1 (lower than any other MX)The MX token comes from the Microsoft 365 admin center, under Domains.
  • <subdomain>.mx.microsoftDomains moved for DNSSEC, and part of new domains from July 1, 2026.

Source: learn.microsoft.com (opens in a new tab), learn.microsoft.com (opens in a new tab), techcommunity.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

MX preference

Each MX record has a preference number. Senders try the lowest number first, so this map reads the host with the lowest number as the one that takes the mail.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

No MX record

With no MX record, senders deliver to the domain's own address record, as if it were an MX with preference 0. Such a domain often runs no mailbox service at all.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

Null MX

A single MX record with preference 0 and the host . says the domain accepts no email. Mail to it fails at once.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

Any other MX host reads Other, with the host shown as it is.

Google Workspace

Google Workspace

MX smtp.google.com, or older values that start with aspmx.

Source: knowledge.workspace.google.com (opens in a new tab). Checked Nov 10, 2026.

Microsoft 365

Microsoft 365

MX <MX token>.mail.protection.outlook.com, or a subdomain under mx.microsoft.

Source: learn.microsoft.com (opens in a new tab), techcommunity.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

Other named host

Zoho Mail

MX mx.zoho.com, mx2.zoho.com and mx3.zoho.com; the ending changes with the data center.

Source: zoho.com (opens in a new tab). Checked Nov 10, 2026.

Fastmail

MX in1-smtp.messagingengine.com and in2-smtp.messagingengine.com.

Source: fastmail.help (opens in a new tab). Checked Nov 10, 2026.

Proton Mail

MX mail.protonmail.ch and mailsec.protonmail.ch.

Source: proton.me (opens in a new tab). Checked Nov 10, 2026.

iCloud Mail

MX mx01.mail.icloud.com and mx02.mail.icloud.com.

Source: support.apple.com (opens in a new tab). Checked Nov 10, 2026.

Mailgun (inbound routes)

MX mxa.mailgun.org and mxb.mailgun.org.

Source: documentation.mailgun.com (opens in a new tab). Checked Nov 10, 2026.

Security gateway

Sophos Email

MX hosts under prod.hydra.sophos.com, or an eml100 subdomain of ctr.sophos.com.

Source: docs.sophos.com (opens in a new tab). Checked Nov 10, 2026.

Cisco Secure Email Cloud Gateway

MX hosts named for the customer's allocation under iphmx.com.

Source: docs.ces.cisco.com (opens in a new tab), docs.ces.cisco.com (opens in a new tab). Checked Nov 10, 2026.

Barracuda Email Gateway Defense

MX hosts ending in ess.barracudanetworks.com.

Source: documentation.campus.barracuda.com (opens in a new tab). Checked Nov 10, 2026.

Trend Micro Email Security

MX hosts ending in a regional name such as in.tmes.trendmicro.com, in.tmes.trendmicro.eu or in.tmems-jp.trendmicro.com.

Source: docs.trendmicro.com (opens in a new tab). Checked Nov 10, 2026.

Consumer mailbox domains: 12

Gmail

gmail.com, googlemail.com

Google's free mail. Mail to gmail.com and googlemail.com goes to the same place.

Source: support.google.com (opens in a new tab). Checked Nov 10, 2026.

Outlook.com

outlook.com, hotmail.com, live.com

Microsoft's free mail. Hotmail.com and Live.com accounts are reached through Outlook.com.

Source: support.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

iCloud Mail

icloud.com, me.com, mac.com

Apple's free mail. iCloud addresses end in icloud.com, me.com or mac.com.

Source: support.apple.com (opens in a new tab). Checked Nov 10, 2026.

Proton Mail

proton.me, protonmail.com, pm.me, protonmail.ch

Proton's mail. Its own address domains are proton.me, protonmail.com, pm.me and protonmail.ch.

Source: proton.me (opens in a new tab). Checked Nov 10, 2026.

Photo of Utku Zihnioglu

By

· CEO & co-founder

Published Nov 11, 2026

Shorter page: the tool first, the answer in a few lines.

Google Workspace MX records today point at smtp.google.com, at the priority shown above. Many working domains still publish older values that start with aspmx, and Google still supports them. Paste any address at your domain to see which form it publishes, and whether another server takes the mail first.

Only the domain is sent, to Cloudflare's public DNS resolver. The address stays on this page, and nothing is stored.

How to read the result

If the map names Google Workspace, your mail reaches Google, in either form. If it names a security gateway, a filtering service takes the mail first. Google may sit behind it, but DNS cannot show that.

If it names Microsoft 365, another host, or none at all, mail to the domain is not reaching Google. Senders try the host with the lowest preference number first, as RFC 5321, the SMTP standard, sets out, so that host is the one that counts.

A domain with no MX record at all is usually new. Mail to it will most likely fail, so fix that before you hand out the address.

What to do next

Do not change a working MX record to fix a deliverability problem. MX records decide where mail to your domain lands, replies included, not whether receivers trust the mail you send.

That trust rests on SPF, DKIM and DMARC. The SPF record lookup shows each sender your SPF record allows.

Checking a list of prospects rather than your own domain? The bulk MX lookup page covers what each result means for a send.

Google Workspace MX records: common questions

Do I need to replace my old aspmx MX records?

No, not while your mail works. Google still supports the older values that start with aspmx, and its admin help says a working setup needs no change. The map counts both forms as Google Workspace.

What if my domain lists Google and an old mail host at once?

Mail goes to the MX host with the lowest preference number, and that is the host the map names. If the old host still has the lowest number, Google is not getting your mail yet.

Where do I change MX records for Google Workspace?

At the company that hosts your domain's DNS, often the registrar where you bought the domain. MX records are DNS records, so they are edited there. Google's admin help gives the values to enter.

About this article

Photo of Utku Zihnioglu

Utku Zihnioglu

CEO & co-founder

Serial entrepreneur who built infrastructure companies handling billions of requests. Now leads engineering at Oneprofile, which finds the people worth talking to, researches each one, and follows up until they reply.

Drafted with AI from our product docs and code. Utku Zihnioglu answers for what it says.

Send cold email from your own mailboxes

Connect your Google Workspace mailboxes to Oneprofile, and each one takes its turn in a sequence.

Free plan: 200 credits a month, 3 integrations, no card

Send cold email from your own mailboxes

Connect your Google Workspace mailboxes to Oneprofile, and each one takes its turn in a sequence.

Free plan: 200 credits a month, 3 integrations, no card