DNS records for cloud.microsoft

Findings

[INFO] An SPF record is published but no MX records are present. This is normal for send-only domains but worth confirming if you expect to receive mail.

A records

[
  {
    "type": "A",
    "value": "20.236.44.162"
  },
  {
    "type": "A",
    "value": "20.70.246.20"
  },
  {
    "type": "A",
    "value": "20.112.250.133"
  },
  {
    "type": "A",
    "value": "20.76.201.171"
  },
  {
    "type": "A",
    "value": "20.231.239.246"
  }
]

AAAA records

[
  {
    "type": "AAAA",
    "value": "2603:1030:20e:3::23c"
  },
  {
    "type": "AAAA",
    "value": "2603:1010:3:3::5b"
  },
  {
    "type": "AAAA",
    "value": "2603:1020:201:10::10f"
  },
  {
    "type": "AAAA",
    "value": "2603:1030:b:3::152"
  },
  {
    "type": "AAAA",
    "value": "2603:1030:c02:8::14"
  }
]

NS records

[
  {
    "type": "NS",
    "value": "ns2-33.azure-dns.net"
  },
  {
    "type": "NS",
    "value": "ns1-33.azure-dns.com"
  },
  {
    "type": "NS",
    "value": "ns4-33.azure-dns.info"
  },
  {
    "type": "NS",
    "value": "ns3-33.azure-dns.org"
  }
]

TXT records

[
  {
    "type": "TXT",
    "entries": [
      "xzj5cymqxj0d3t7l0gn04gyvxmjyfrvz"
    ]
  },
  {
    "type": "TXT",
    "entries": [
      "v=spf1 -all"
    ]
  },
  {
    "type": "TXT",
    "entries": [
      "google-site-verification=4wO5rRfHWPhm6d38smNnzT8pmye_N_fop9k7VUZ3MQg"
    ]
  }
]

SOA records

[
  {
    "type": "SOA",
    "nsname": "ns1-33.azure-dns.com",
    "hostmaster": "azuredns-hostmaster.microsoft.com",
    "serial": 1,
    "refresh": 3600,
    "retry": 120,
    "expire": 2419200,
    "minttl": 60
  }
]

CAA records

[
  {
    "type": "CAA",
    "critical": 0,
    "tag": "issue",
    "value": "microsoft.com"
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "issue",
    "value": "digicert.com"
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "unknown",
    "value": ""
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "iodef",
    "value": "mailto:[email protected]"
  }
]

What does this mean?

These records are pulled live from authoritative DNS at request time and re-validated daily. Use them to debug routing, deliverability, and TLS issues for cloud.microsoft.

Related tools: DNS Lookup · SPF Checker · DMARC Lookup