MX records

MX records show which mail exchangers are published for receiving email for a domain.

Mail postureProvider inferenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

mx_recordsdns_raw.mx_recordscurrent_posture.fields.mx_records

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

MX records can help contextualise visible mail routing and mail provider movement when interpreted with DMARC, SPF, TXT records and inferred email provider.

What change may indicate

MX changes may indicate mail provider migration, routing changes, filtering changes, reseller configuration, administrative cleanup or operational maintenance.

Limits

What it cannot tell us

MX presence does not prove that email is actively used, safe or fully protected. MX records alone cannot prove risk, compromise, negligence or intent.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

Mail exchange change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Nearby signals

Use alongside

Explore this signal in context

This signal is most useful when read alongside related State views, explainers, reports and methodology notes.