IPv4 Addresses
cloud.microsoft. 300 IN A 20.112.250.133 cloud.microsoft. 300 IN A 20.231.239.246 cloud.microsoft. 300 IN A 20.236.44.162 cloud.microsoft. 300 IN A 20.70.246.20 cloud.microsoft. 300 IN A 20.76.201.171
IPv6 Addresses
cloud.microsoft. 300 IN AAAA 2603:1010:3:3:0:0:0:5B cloud.microsoft. 300 IN AAAA 2603:1020:201:10:0:0:0:10F cloud.microsoft. 300 IN AAAA 2603:1030:20E:3:0:0:0:23C cloud.microsoft. 300 IN AAAA 2603:1030:B:3:0:0:0:152 cloud.microsoft. 300 IN AAAA 2603:1030:C02:8:0:0:0:14
Name Servers
cloud.microsoft. 466 IN NS ns1-33.azure-dns.com. cloud.microsoft. 466 IN NS ns2-33.azure-dns.net. cloud.microsoft. 466 IN NS ns3-33.azure-dns.org. cloud.microsoft. 466 IN NS ns4-33.azure-dns.info.
SOA Details
cloud.microsoft. 60 IN SOA ns1-33.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 3600 120 2419200 60
Certificate Authority Authorization
cloud.microsoft. 300 IN CAA 0 contactemail "[email protected]" cloud.microsoft. 300 IN CAA 0 iodef "mailto:[email protected]" cloud.microsoft. 300 IN CAA 0 issue "digicert.com" cloud.microsoft. 300 IN CAA 0 issue "microsoft.com"
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
cloud.microsoft. 300 IN DMARC v=DMARC1;p=reject;sp=reject;pct=100;aspf=s;adkim=s;rua=mailto:[email protected];ruf=mailto:[email protected]
DKIM
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| - Fail | all |
—
|
|
cloud.microsoft. 300 IN TXT "v=spf1 -all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
cloud.microsoft. 300 IN TXT "google-site-verification=4wO5rRfHWPhm6d38smNnzT8pmye_N_fop9k7VUZ3MQg" cloud.microsoft. 300 IN TXT "xzj5cymqxj0d3t7l0gn04gyvxmjyfrvz"
DNSSEC Public Keys
cloud.microsoft. 466 IN DNSKEY 257 3 13 pLnS1aWzBcj0Z4EGnWoypF3697WSfgvPW0jOS6hCf0mRIx4i5DIbGIMHQRs0uMhwCDWTmt7R0vysTpeS8Y1NLQ== cloud.microsoft. 466 IN DNSKEY 256 3 13 Icyo2mfx1wePvepB4+3IHhgOL0O8p7mAZKDcutOEFEMpO3F8o8Rvw4SJPGRbeHCSj+iFmfJUuE11ubOmTjzRXA==
Delegation Signer
cloud.microsoft. 466 IN DS 61899 13 2 3669D6E0BA4221859F38E90C598CD669A834BD99EE6478C2217C90D2C509D3ED