Name Servers
mx.microsoft. 1199 IN NS ns1-81.azure-dns.com. mx.microsoft. 1199 IN NS ns2-81.azure-dns.net. mx.microsoft. 1199 IN NS ns3-81.azure-dns.org. mx.microsoft. 1199 IN NS ns4-81.azure-dns.info.
SOA Details
mx.microsoft. 1200 IN SOA ns1-81.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 3600 300 2419200 300
Certificate Authority Authorization
mx.microsoft. 1200 IN CAA 0 contactemail "[email protected]" mx.microsoft. 1200 IN CAA 0 iodef "mailto:[email protected]" mx.microsoft. 1200 IN CAA 0 issue "digicert.com" mx.microsoft. 1200 IN CAA 0 issue "microsoft.com"
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
mx.microsoft. 30 IN DMARC v=DMARC1; p=reject; sp=reject; pct=100; aspf=s; adkim=s; rua=mailto:[email protected]; ruf=mailto:[email protected]
DKIM
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| - Fail | all |
—
|
|
mx.microsoft. 29 IN TXT "v=spf1 -all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
DNSSEC Public Keys
mx.microsoft. 1199 IN DNSKEY 257 3 13 +cvazJlaW4qZNgnSRhPBY+3RpUUE2qE7E/uWpsdGW52up0rqqRlLUCctxChPQ9D0aLwZOQGm9Z9V7x9TxqeZPA== mx.microsoft. 1199 IN DNSKEY 256 3 13 XTi7sCgP1jtt9hAR3WhhrNw78BxnJwnYNn+1oXZYoZBi4Kb7GqxVMI46nkP7DrepTQxQjbcjjrCdjlJs3gYr7g==
Delegation Signer
mx.microsoft. 1199 IN DS 50858 13 2 9FFAB1C8DBE645CE9E27C8AC7F40920D802CA685F9EB13167A4AAB3A2CF45886
DNSSEC Next Secure
mx.microsoft. 300 IN NSEC .mx.microsoft ["DNSKEY", "NSEC", "RRSIG", "TXT", "SOA", "NS", "CAA"]