27
records
IPv4 Addresses
TTL
5m
5m
5m
5m
5m
cloud.microsoft. 300 IN A 20.112.250.133 cloud.microsoft. 300 IN A 20.231.239.246 cloud.microsoft. 300 IN A 20.236.44.162 cloud.microsoft. 300 IN A 20.70.246.20 cloud.microsoft. 300 IN A 20.76.201.171
IPv6 Addresses
TTL
5m
5m
5m
5m
5m
cloud.microsoft. 300 IN AAAA 2603:1010:3:3:0:0:0:5B cloud.microsoft. 300 IN AAAA 2603:1020:201:10:0:0:0:10F cloud.microsoft. 300 IN AAAA 2603:1030:20E:3:0:0:0:23C cloud.microsoft. 300 IN AAAA 2603:1030:B:3:0:0:0:152 cloud.microsoft. 300 IN AAAA 2603:1030:C02:8:0:0:0:14
Name Servers
TTL
14m
14m
14m
14m
cloud.microsoft. 882 IN NS ns1-33.azure-dns.com. cloud.microsoft. 882 IN NS ns2-33.azure-dns.net. cloud.microsoft. 882 IN NS ns3-33.azure-dns.org. cloud.microsoft. 882 IN NS ns4-33.azure-dns.info.
SOA Details
TTL
1m
SOA
Responsible
azuredns-hostmaster.microsoft.com
SOA
Serial
1
SOA
Times
Refresh
1h
Retry
2m
Expire
28d
Minimum TTL
1m
cloud.microsoft. 60 IN SOA ns1-33.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 3600 120 2419200 60
Certificate Authority Authorization
TTL
CAA
—
5m
CAA
—
5m
5m
CAA
—
5m
cloud.microsoft. 300 IN CAA 0 contactemail "[email protected]" cloud.microsoft. 300 IN CAA 0 iodef "mailto:[email protected]" cloud.microsoft. 300 IN CAA 0 issue "digicert.com" cloud.microsoft. 300 IN CAA 0 issue "microsoft.com"
DMARC
TTL
DMARC
Policy
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
none
quarantine
reject
5m
DMARC
Subdomain Policy
Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.
none
quarantine
reject
DMARC
Percentage
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100
DMARC
RUA
mailto:[email protected]
Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
DMARC
RUF
mailto:[email protected]
Forensic (per-failure) reports. Often omitted for privacy or volume.
cloud.microsoft. 300 IN DMARC v=DMARC1;p=reject;sp=reject;pct=100;aspf=s;adkim=s;rua=mailto:[email protected];ruf=mailto:[email protected]
DKIM
TTL
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
TTL
SPF
SPFv1
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| - Fail | all |
—
|
|
5m
cloud.microsoft. 300 IN TXT "v=spf1 -all"
MTA-STS
TTL
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
TTL
google-site-verification=4wO5rRfHWPhm6d38smNnzT8pmye_N_fop9k7VUZ3MQg
5m
TXT
—
xzj5cymqxj0d3t7l0gn04gyvxmjyfrvz
5m
cloud.microsoft. 300 IN TXT "google-site-verification=4wO5rRfHWPhm6d38smNnzT8pmye_N_fop9k7VUZ3MQg" cloud.microsoft. 300 IN TXT "xzj5cymqxj0d3t7l0gn04gyvxmjyfrvz"
DNSSEC Public Keys
TTL
DNSKEY
256 3 13 hJVPnabVEy0vGDJdkuNAN+iE97n7OnIW73qucfJQN/WCNUGz3WH60gi69QASHDPdAHRKtzf3sooodPkGPz5sRQ==
14m
DNSKEY
257 3 13 pLnS1aWzBcj0Z4EGnWoypF3697WSfgvPW0jOS6hCf0mRIx4i5DIbGIMHQRs0uMhwCDWTmt7R0vysTpeS8Y1NLQ==
14m
cloud.microsoft. 882 IN DNSKEY 256 3 13 hJVPnabVEy0vGDJdkuNAN+iE97n7OnIW73qucfJQN/WCNUGz3WH60gi69QASHDPdAHRKtzf3sooodPkGPz5sRQ== cloud.microsoft. 882 IN DNSKEY 257 3 13 pLnS1aWzBcj0Z4EGnWoypF3697WSfgvPW0jOS6hCf0mRIx4i5DIbGIMHQRs0uMhwCDWTmt7R0vysTpeS8Y1NLQ==
Delegation Signer
TTL
DS
61899 13 2 3669D6E0BA4221859F38E90C598CD669A834BD99EE6478C2217C90D2C509D3ED
14m
cloud.microsoft. 882 IN DS 61899 13 2 3669D6E0BA4221859F38E90C598CD669A834BD99EE6478C2217C90D2C509D3ED
DNSSEC Next Secure
TTL
NSEC
.cloud.microsoft ["DNSKEY", "NSEC", "RRSIG", "AAAA", "TXT", "SOA", "NS", "A", "CAA"]
1m
cloud.microsoft. 60 IN NSEC .cloud.microsoft ["DNSKEY", "NSEC", "RRSIG", "AAAA", "TXT", "SOA", "NS", "A", "CAA"]