How to find out which email provider a company uses

What is an email service provider (ESP)?

An email service provider is the platform that hosts and sends email for a domain. For businesses this is usually Google Workspace, Microsoft 365, Zoho Mail, or a similar service. The choice of ESP affects how emails are delivered, what security features are in place, and how sophisticated the email infrastructure is.

How to detect which ESP a domain uses

Every ESP has a distinctive MX record pattern. MX (Mail Exchange) records are DNS entries that specify which mail servers handle incoming email for a domain. By reading these records and matching them against known patterns, you can identify the provider with high accuracy.

Common MX patterns:

• Google Workspace: aspmx.l.google.com, googlemail.com
• Microsoft 365: mail.protection.outlook.com
• Zoho Mail: mx.zoho.com
• Fastmail: in1-smtp.messagingengine.com
• Proton Mail: mail.protonmail.ch, mailsec.protonmail.ch

Why ESP detection matters for outbound sales

Knowing which email provider a prospect uses gives you useful context before reaching out:

A domain running on Google Workspace or Microsoft 365 is almost certainly a legitimate business with active email infrastructure. A domain with no MX records, or MX records pointing to a parked domain service, is unlikely to be a real business contact worth pursuing.

ESP data also helps with personalisation. Sales teams at some companies reference the prospect's infrastructure in their outreach — though this should be done carefully to avoid seeming intrusive.

ESP detection in BounceProtect

BounceProtect uses MX record patterns as part of the deep analysis feature. When you run deep analysis on a bulk upload, the ESP for each domain is identified and included in the results alongside domain age, business legitimacy score, and company matching data.

You can also look up any individual domain using the free ESP Finder tool at bounceprotect.com/tools/esp-finder — no account required.

Limitations of MX-based ESP detection

Some large enterprises route their MX records through security gateways like Mimecast, Proofpoint, or Barracuda before delivery. In these cases the MX records point to the security gateway, not the underlying ESP. The detection tool will identify the gateway rather than the underlying platform. This is still useful information — it indicates a mature, security-conscious email setup.