Email provider

Email provider is an inferred signal based on mail-related DNS evidence such as MX records and related provider patterns.

Mail postureProvider inferenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

email_providermx_recordsdns_raw.mx_recordscurrent_posture.fields.email_provider

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

Email provider inference helps group visible mail infrastructure patterns and makes provider movement easier to compare over time.

What change may indicate

Provider movement may indicate migration, filtering changes, reseller configuration, routing updates, administrative cleanup or operational maintenance.

Limits

What it cannot tell us

This is an inference, not a declaration from the provider. It may be incomplete or ambiguous and cannot prove a direct customer relationship, quality, safety, risk, compromise or intent.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

Email provider change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Nearby signals

Use alongside

Explore this signal in context

This signal is most useful when read alongside related State views, explainers, reports and methodology notes.