DNS provider

DNS provider is an inferred signal based on name servers and other visible DNS infrastructure patterns.

DNS signalProvider inferenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

dns_providernameserversdns_raw.nameserverscurrent_posture.fields.dns_provider

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

Provider inference helps group visible infrastructure movement over time and can help explain concentration, migration and delegation patterns.

What change may indicate

DNS provider movement may reflect direct provider use, reseller use, white-labelled services, delegated infrastructure, registrar DNS changes or operational maintenance.

Limits

What it cannot tell us

DNS provider inference is a best-effort classification. It cannot prove a direct customer relationship, endorsement, service quality, safety, risk, compromise or intent.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

DNS provider change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Nearby signals

Use alongside

Explore this signal in context

This signal is most useful when read alongside related State views, explainers, reports and methodology notes.