Name servers

Name servers show which authoritative DNS infrastructure is delegated for a domain.

DNS signalProvider inferenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

nameserversdns_raw.nameserverscurrent_posture.fields.nameservers

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

Name server changes are high-signal because they can affect DNS control, hosting, mail routing and service availability. They are useful evidence of delegation movement over time.

What change may indicate

Name server changes may indicate DNS provider migration, registrar DNS changes, consolidation, recovery work, delegated infrastructure changes or operational maintenance.

Limits

What it cannot tell us

Name server changes do not prove compromise, misconfiguration, negligence, safety or intent. They need context from DNS records, provider inference and collection timing.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

Nameserver change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Use alongside

Explore this signal in context

Nameserver signals are most useful when read alongside DNS provider State views, RDAP context, dated reports and cohort summaries.