Address records
Address records show the public IP destinations returned for a domain where A or AAAA records are observed.
Observed evidence
Observed by .auDO
These fields describe the public evidence .auDO records for this signal where available.
Interpretation
How to read this signal
This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.
Why it matters
Address records provide visible evidence of where a domain resolved at collection time. They can help contextualise hosting movement, CDN behaviour and routine infrastructure churn.
What change may indicate
Address record movement may indicate hosting changes, CDN behaviour, failover, load balancing, provider migration, operational maintenance or routine cloud infrastructure change.
Limits
What it cannot tell us
Address records alone do not identify the operator or prove where a service is hosted without context. Frequent address changes may be routine and do not prove risk, safety, compromise or intent.
Observations are descriptive records, not risk scores, allegations or evidence of compromise.
Observed patterns
Common observations
Report surface
Where it appears
This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.
Nearby signals
Related signals
Use alongside
Explore this signal in context
This signal is most useful when read alongside related State views, explainers, reports and methodology notes.