NSToolKit
NSToolKit
free network tools

DNS records for office365.com

Findings

  • [INFO] An SPF record is published but no MX records are present. This is normal for send-only domains but worth confirming if you expect to receive mail.

A records

[
  {
    "type": "A",
    "value": "40.112.243.53"
  },
  {
    "type": "A",
    "value": "20.119.0.28"
  }
]

NS records

[
  {
    "type": "NS",
    "value": "ns1-07.azure-dns.com"
  },
  {
    "type": "NS",
    "value": "ns2-07.azure-dns.net"
  },
  {
    "type": "NS",
    "value": "ns3-07.azure-dns.org"
  },
  {
    "type": "NS",
    "value": "ns4-07.azure-dns.info"
  }
]

TXT records

[
  {
    "type": "TXT",
    "entries": [
      "_ufamlucd6jp7xslb9wnr85vc03dxyqh"
    ]
  },
  {
    "type": "TXT",
    "entries": [
      "v=spf1 include:spf.protection.outlook.com ~all"
    ]
  },
  {
    "type": "TXT",
    "entries": [
      "google-site-verification=u9PqvuplbTIYlwiMAzJWnRRtHYoAlaTX5GMtRRXqWXA"
    ]
  },
  {
    "type": "TXT",
    "entries": [
      "officeprodes.azurewebsites.net"
    ]
  }
]

SOA records

[
  {
    "type": "SOA",
    "nsname": "ns1-07.azure-dns.com",
    "hostmaster": "msnhst.microsoft.com",
    "serial": 2017971531,
    "refresh": 300,
    "retry": 120,
    "expire": 2419200,
    "minttl": 60
  }
]

CAA records

[
  {
    "type": "CAA",
    "critical": 0,
    "tag": "issue",
    "value": "microsoft.com"
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "issue",
    "value": "globalsign.com"
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "issue",
    "value": "digicert.com"
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "unknown",
    "value": ""
  },
  {
    "type": "CAA",
    "critical": 0,
    "tag": "iodef",
    "value": "mailto:[email protected]"
  }
]

What does this mean?

These records are pulled live from authoritative DNS at request time and re-validated daily. Use them to debug routing, deliverability, and TLS issues for office365.com.

Related tools: DNS Lookup · SPF Checker · DMARC Lookup