Several reports repeat one unverified source

A fictional analyst receives three reports linking an address to a campaign. The supplied provenance shows that all three repeat the same original unverified post, and one report omits the original observation date. The address also hosts a shared service used by legitimate organizations. A colleague proposes high-confidence attribution and automatic blocking because three reports agree. Another separates independent corroboration, indicator freshness, shared infrastructure and the actual consumer’s decision. No feed is queried or block deployed in this written exercise. The learner must identify why report count alone overstates confidence and explain how a useful intelligence product can communicate uncertainty, alternatives and a justified next step without inventing evidence.