Free tool · no signup
We read the public evidence (MX records, every SPF include, and DKIM keys at the selectors big providers use) and list the mailbox host and every sending service behind a domain.
01 Where the evidence comes from
A domain has to tell the world who handles its mail, or receivers won't trust it. That makes the answer public, for anyone who knows where to look.
Where mail to the domain is delivered: the mailbox provider, or a security gateway in front of it.
Every service allowed to send as the domain. We unroll nested includes, because branded includes often wrap the real provider.
Signing keys published at provider-specific names (google, selector1, s1, k1…). A key delegated to a provider's domain is near-certain evidence.
02 Questions
Something else? Write to us — a real person answers, usually the same day.
03 More free tools
Each tool answers one question about a domain's email. All free, no signup.
All free tools ▶Unrolls every include and counts lookups against the 10-lookup limit, with a corrected record.
DNS & domains→A, AAAA, MX, TXT, NS, CNAME and CAA side by side, and who hosts the zone.
Authentication→SPF, DKIM, DMARC, MX and MTA-STS in one pass, with a score and the fix for anything that fails.
Every domain you run in one inbox, from $3 a mailbox. 14 days free, no card.