Raw evidence

Raw evidence is the preserved public response data or source material used to support derived observations.

ProvenancePublic evidenceObserved over time

Observed evidence

Observed by .auDO

These fields describe the public evidence .auDO records for this signal where available.

rdap_rawdns_rawold_valuenew_valuesnapshot_id

Interpretation

How to read this signal

This signal is useful as public evidence of visible posture or change, not as a conclusion on its own.

Why it matters

Raw evidence allows observations to be traced back to public source material. It supports transparency, repeatability and careful review of derived observations.

What change may indicate

Raw evidence may change when public sources change, DNS answers rotate, source availability shifts, redaction changes or collection fallback is used.

Limits

What it cannot tell us

Raw evidence can still be incomplete where public sources are unavailable, redacted or inconsistent. It cannot prove intent, risk, safety, compromise, negligence or private operational state.

Observations are descriptive records, not risk scores, allegations or evidence of compromise.

Observed patterns

Common observations

A record changeAAAA record changeMail exchange changeRDAP status change

Report surface

Where it appears

This signal can appear in daily reports, the observation panel, methodology notes, derived report artefacts and preserved raw snapshot evidence when the relevant fields are present.

Use alongside

Explore this signal in context

Provenance signals are most useful when read alongside reports, methodology notes and the observation panel.