{ "run_date": "2026-09-09", "events": [ { "id": "cc289ab2-fb0f-4a19-980a-3e10324ac032", "domain": "unimelb.edu.au", "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "nameservers_changed", "event_label": "Nameserver change", "event_time": "2026-09-08T19:58:52.566375+00:00", "summary": "unimelb.edu.au: nameservers changed", "old_value": [ "ns1.aarnet.net.au", "ns2.aarnet.net.au", "ns3.aarnet.net.au" ], "new_value": [ "edns-266.unimelb.net.au", "edns-396.unimelb.net.au", "ns1.aarnet.net.au", "ns2.aarnet.net.au", "ns3.aarnet.net.au" ], "category": "delegation", "severity": "medium", "materiality": "material", "event_scope": "observatory", "snapshot_id": "c9c1b5af-b2f0-4610-b02e-a4d072caae38", "signal_tier": "tier_1", "signal_label": "High-signal trust posture change", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "8fab4278-38a5-464b-a9b4-b398d1539399", "domain": "abc.net.au", "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:56:55.631312+00:00", "summary": "abc.net.au: a_records changed", "old_value": [ "184.30.152.92" ], "new_value": [ "23.222.200.128" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "1fd46b60-14b9-465b-a031-8bb7aa8fe773", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "e08d454d-319d-4a6e-bdf9-7417e1d2fe04", "domain": "adelaide.edu.au", "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:17.128324+00:00", "summary": "adelaide.edu.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.createsend.com", "_spf.mlsend.com", "amazonses.com", "ap.rp.oracleemaildelivery.com", "au._netblocks.mimecast.com", "performind.com", "spf1.fraedom.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "campaign-monitor", "mimecast", "oracle" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.createsend.com", "_spf.mlsend.com", "amazonses.com", "ap.rp.oracleemaildelivery.com", "au._netblocks.mimecast.com", "performind.com", "spf1.fraedom.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "campaign-monitor", "mimecast", "oracle" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "56b054be-e353-4a2a-b55a-398bad76da12", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "9d20250c-e623-4433-8ed8-13e5d8acd106", "domain": "agl.com.au", "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:54:52.821880+00:00", "summary": "agl.com.au: a_records changed", "old_value": [ "23.61.3.235" ], "new_value": [ "23.209.57.193" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "8839eff3-d63b-4654-b486-bd2f5d8a9e51", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "38b84be1-6a0e-4ca0-8391-d4a167ddb0b7", "domain": "agl.com.au", "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:54:53.532034+00:00", "summary": "agl.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.salesforce.com", "production.fxdms.net", "sendgrid.net", "spf-003c4301.pphosted.com", "spf.protection.outlook.com", "spf.swiftdigital.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "swift-digital", "twilio-sendgrid" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.salesforce.com", "production.fxdms.net", "sendgrid.net", "spf-003c4301.pphosted.com", "spf.protection.outlook.com", "spf.swiftdigital.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "swift-digital", "twilio-sendgrid" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "8839eff3-d63b-4654-b486-bd2f5d8a9e51", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "31d580d0-1222-424a-bb1d-cfa3a336f0a5", "domain": "airports.asn.au", "domain_id": "d6aa3b5c-0266-4596-bff6-82b7697209d4", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:54:58.633769+00:00", "summary": "airports.asn.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "441916582.spf07.hubspotemail.net", "sendgrid.net", "servers.mcsv.net", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "hubspot", "mailchimp", "microsoft", "twilio-sendgrid" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "441916582.spf07.hubspotemail.net", "sendgrid.net", "servers.mcsv.net", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "hubspot", "mailchimp", "microsoft", "twilio-sendgrid" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "84af96b8-b59b-4850-ac4a-1e76bf9491af", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a230c723-49c9-4441-9d2b-c064496adcd5", "domain": "auspost.com.au", "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:57:56.393858+00:00", "summary": "auspost.com.au: a_records changed", "old_value": [ "13.249.74.101", "13.249.74.111", "13.249.74.121", "13.249.74.27" ], "new_value": [ "3.167.99.106", "3.167.99.18", "3.167.99.6", "3.167.99.72" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "1dea8310-9499-45b3-9910-9035232da2ec", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a6e2909a-c103-45e3-baa5-98f7a2c590ae", "domain": "auspost.com.au", "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:57.263336+00:00", "summary": "auspost.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.salesforce.com", "amazonses.com", "spf.auspost.com.au", "spf.exclaimer.net", "spf.protection.outlook.com", "spf2.auspost.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "exclaimer", "microsoft", "salesforce" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.salesforce.com", "amazonses.com", "spf.auspost.com.au", "spf.exclaimer.net", "spf.protection.outlook.com", "spf2.auspost.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "exclaimer", "microsoft", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "1dea8310-9499-45b3-9910-9035232da2ec", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "184dd6ef-1b40-49ef-98a4-7942d9ab2ed0", "domain": "barnardos.org.au", "domain_id": "0c32dbda-e4a3-4688-873c-9ed75fc77904", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:48.227411+00:00", "summary": "barnardos.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "3481800.spf03.hubspotemail.net", "_spf.microsoft.com", "_spf.salesforce.com", "au._netblocks.mimecast.com", "outboundmail2.blackbaud.net", "raiselysite.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "hubspot", "microsoft", "mimecast", "salesforce" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "3481800.spf03.hubspotemail.net", "_spf.microsoft.com", "_spf.salesforce.com", "au._netblocks.mimecast.com", "outboundmail2.blackbaud.net", "raiselysite.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "hubspot", "microsoft", "mimecast", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "73b7ff99-49a2-4803-9de3-4d371d7c5afa", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "d629f215-d02c-4f48-a43d-c9d4226d9b1c", "domain": "beyondblue.org.au", "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:56:27.392189+00:00", "summary": "beyondblue.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.psm.knowbe4.com", "_spf.qp-mail.com.au", "_spf.salesforce.com", "amazonses.com", "spf.au.exclaimer.net", "spf.protection.outlook.com", "spf1.formassembly.com", "spfx.isentia.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "exclaimer", "formassembly", "knowbe4", "microsoft", "salesforce" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.psm.knowbe4.com", "_spf.qp-mail.com.au", "_spf.salesforce.com", "amazonses.com", "spf.au.exclaimer.net", "spf.protection.outlook.com", "spf1.formassembly.com", "spfx.isentia.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "exclaimer", "formassembly", "knowbe4", "microsoft", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "a3d7d375-773b-4fb8-89f7-a6055c5874ec", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "fd4f3902-995e-4531-a3fb-a1e6b1ceae04", "domain": "bigw.com.au", "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:58:31.252826+00:00", "summary": "bigw.com.au: a_records changed", "old_value": [ "23.222.205.182" ], "new_value": [ "23.37.17.163" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "ff491b54-4de3-40e5-8cf2-dfac5174670a", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "c8ab8a7b-b50c-4cd8-a2c5-1233f48d7cd3", "domain": "bigw.com.au", "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:58:32.046530+00:00", "summary": "bigw.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.woolworths.com.au", "spf-00331a03.pphosted.com", "tim.telstra.com", "u4138855.wl106.sendgrid.net" ], "identity": { "state": "matched", "provider_ids": [ "sap" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.woolworths.com.au", "spf-00331a03.pphosted.com", "tim.telstra.com", "u4138855.wl106.sendgrid.net" ], "identity": { "state": "matched", "provider_ids": [ "sap" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "ff491b54-4de3-40e5-8cf2-dfac5174670a", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "7cb39a99-e8a2-46a7-90fb-d97a65a2ac3b", "domain": "bom.gov.au", "domain_id": "0400d45a-169e-4098-99fa-a7a662df19bc", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:59:21.514849+00:00", "summary": "bom.gov.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "bom.secureintellicentre.net.au", "click-send.net", "online-send.com", "spf.protection.outlook.com", "spf.swiftdigital.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "swift-digital" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "bom.secureintellicentre.net.au", "click-send.net", "online-send.com", "spf.protection.outlook.com", "spf.swiftdigital.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "swift-digital" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "0f62be4e-0026-4f95-b39b-18a4d4386784", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "50210496-986a-4f0f-bd9b-c264e445fd40", "domain": "care.org.au", "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:57:06.878692+00:00", "summary": "care.org.au: aaaa_records changed", "old_value": [ "2600:9000:2348:4e00:2:88:1b80:93a1", "2600:9000:2348:7a00:2:88:1b80:93a1", "2600:9000:2348:9800:2:88:1b80:93a1", "2600:9000:2348:9e00:2:88:1b80:93a1", "2600:9000:2348:ae00:2:88:1b80:93a1", "2600:9000:2348:d400:2:88:1b80:93a1", "2600:9000:2348:f200:2:88:1b80:93a1", "2600:9000:2348:f800:2:88:1b80:93a1" ], "new_value": [ "2600:9000:2348:1200:2:88:1b80:93a1", "2600:9000:2348:1600:2:88:1b80:93a1", "2600:9000:2348:2800:2:88:1b80:93a1", "2600:9000:2348:4c00:2:88:1b80:93a1", "2600:9000:2348:4e00:2:88:1b80:93a1", "2600:9000:2348:5200:2:88:1b80:93a1", "2600:9000:2348:7c00:2:88:1b80:93a1", "2600:9000:2348:9e00:2:88:1b80:93a1" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "e0b35215-dd5e-4c6c-85d6-a2cf71288af2", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "26da228e-d4c7-42a4-be3a-3e24f85c9451", "domain": "carsales.com.au", "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-07T20:38:58.500148+00:00", "summary": "carsales.com.au: a_records changed", "old_value": [ "13.224.187.31", "13.224.187.41", "13.224.187.45", "13.224.187.67" ], "new_value": [ "3.169.183.116", "3.169.183.17", "3.169.183.43", "3.169.183.56" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "3eedd67a-2fe1-41e9-bbfd-66da072e6bd6", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3f3c868c-a9a4-4f6e-bad6-45be5fb5cf30", "domain": "carsales.com.au", "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T20:00:12.136296+00:00", "summary": "carsales.com.au: a_records changed", "old_value": [ "3.169.183.116", "3.169.183.17", "3.169.183.43", "3.169.183.56" ], "new_value": [ "18.238.96.73", "18.238.96.79", "18.238.96.90", "18.238.96.92" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "74ae08d7-b595-484f-a2eb-35cdefeb0505", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "7c7f8903-f5b0-4aaa-9291-18f677436fd7", "domain": "deakin.edu.au", "domain_id": "a6738191-8536-49a1-97dd-fce674e12c13", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:59:53.190879+00:00", "summary": "deakin.edu.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.deakin.edu.au", "service-now.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "servicenow" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.deakin.edu.au", "service-now.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "servicenow" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "da936160-e0c7-4494-90c2-df2376486b21", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "0754e869-75ff-4707-be98-749bd3c10d65", "domain": "domain.com.au", "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:57:35.211240+00:00", "summary": "domain.com.au: a_records changed", "old_value": [ "3.175.34.110", "3.175.34.111", "3.175.34.121", "3.175.34.24" ], "new_value": [ "18.160.213.127", "18.160.213.17", "18.160.213.27", "18.160.213.60" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "7684f247-3cc8-4fbc-9e3b-a977a94ee3d2", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "5b34afaf-01a6-4a1c-8896-5642b86b45b1", "domain": "energyaustralia.com.au", "domain_id": "dd28baaa-508c-4773-aab1-3888253a85b5", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:55:07.966179+00:00", "summary": "energyaustralia.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "rnmk.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "sap" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "rnmk.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "sap" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "96fc506d-790d-48a2-8db7-0fbf5a46f2d6", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "d86cbb03-bbd2-4f4f-8984-424c41537f4c", "domain": "harveynorman.com.au", "domain_id": "b64b87c0-5201-4872-a3fa-1f547d1e0d92", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:56:58.704086+00:00", "summary": "harveynorman.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "au._netblocks.mimecast.com", "cmail1.com", "servers.mcsv.net" ], "identity": { "state": "multiple", "provider_ids": [ "campaign-monitor", "mailchimp", "mimecast" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "au._netblocks.mimecast.com", "cmail1.com", "servers.mcsv.net" ], "identity": { "state": "multiple", "provider_ids": [ "campaign-monitor", "mailchimp", "mimecast" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "ba6b7b6c-a478-47db-9ac4-5b46ed75548a", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "dad0beeb-b9a1-4874-8f8f-7e7c41c3d693", "domain": "homeaffairs.gov.au", "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:58:22.895256+00:00", "summary": "homeaffairs.gov.au: a_records changed", "old_value": [ "23.62.226.171", "23.62.226.174" ], "new_value": [ "23.203.166.15", "23.203.166.30" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "958df54a-b8e9-4e06-b627-f67a0d8c0436", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3424ed99-a857-4a9d-8f56-2110be1ee372", "domain": "homeaffairs.gov.au", "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:58:23.170722+00:00", "summary": "homeaffairs.gov.au: aaaa_records changed", "old_value": [ "2600:1406:35:4::1722:3ea5", "2600:1406:35:4::1722:3eab" ], "new_value": [ "2600:1406:3a00:33::170b:cfec", "2600:1406:3a00:33::170b:cfef" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "958df54a-b8e9-4e06-b627-f67a0d8c0436", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "e4cea933-8678-4a65-9254-f1761856e901", "domain": "iag.com.au", "domain_id": "27632308-d381-4f44-9eb9-02664f075406", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:54:30.124833+00:00", "summary": "iag.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "eventsairmail.com", "service-now.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "sap", "servicenow" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "eventsairmail.com", "service-now.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce", "sap", "servicenow" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "32ba7c8d-635f-4eca-98eb-e665d6eb70fe", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "10fb26a7-5e9f-428a-aef3-85bb60d4ede5", "domain": "kmart.com.au", "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:54:16.314529+00:00", "summary": "kmart.com.au: a_records changed", "old_value": [ "23.198.7.169", "23.198.7.184" ], "new_value": [ "23.48.203.106", "23.48.203.108" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d882455c-0e4f-4503-86c1-714e2d2e5654", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "38b444bb-f180-4e85-8eab-bd5a87c1fb31", "domain": "kmart.com.au", "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:54:17.098178+00:00", "summary": "kmart.com.au: aaaa_records changed", "old_value": [ "2600:1404:6400:14::17c6:732", "2600:1404:6400:14::17c6:737" ], "new_value": [ "2600:1408:c400:11::17cd:6b59", "2600:1408:c400:11::17cd:6b5b" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d882455c-0e4f-4503-86c1-714e2d2e5654", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "cfcf2ca7-b451-47bc-9193-a12ff3d02f56", "domain": "macquarie.com.au", "domain_id": "11a5ffbd-c8d7-4aed-bf15-91605dfb9194", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:56:21.010099+00:00", "summary": "macquarie.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "spf-005e7502.pphosted.com", "spf.messagelabs.com" ], "identity": { "state": "matched", "provider_ids": [ "broadcom" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "spf-005e7502.pphosted.com", "spf.messagelabs.com" ], "identity": { "state": "matched", "provider_ids": [ "broadcom" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "6d836923-7fa0-4cbd-843b-931922bc41ff", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "132080bc-710d-4314-bda6-ca8c2856ff7b", "domain": "nab.com.au", "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:54:27.432143+00:00", "summary": "nab.com.au: a_records changed", "old_value": [ "23.200.133.31", "23.200.133.41" ], "new_value": [ "23.48.203.145", "23.48.203.146" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "723cedf5-ac3d-4499-b557-c7207da11add", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a5580b7c-9976-4991-a1ef-019bfdb588a9", "domain": "news.com.au", "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:59:56.742512+00:00", "summary": "news.com.au: a_records changed", "old_value": [ "23.222.204.163" ], "new_value": [ "23.37.16.152" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "a35cd8ad-93a2-436c-bf63-26f231052335", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "1296d311-dcb1-4e94-96d7-ceb5bdf65a54", "domain": "news.com.au", "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:59:57.027690+00:00", "summary": "news.com.au: aaaa_records changed", "old_value": [ "2600:1406:35:182::ebe", "2600:1406:35:184::ebe", "2600:1406:35:187::ebe", "2600:1406:35:18f::ebe", "2600:1406:35:193::ebe" ], "new_value": [ "2600:1406:2e00:981::ebe", "2600:1406:2e00:984::ebe", "2600:1406:2e00:985::ebe", "2600:1406:2e00:989::ebe", "2600:1406:2e00:98a::ebe" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "a35cd8ad-93a2-436c-bf63-26f231052335", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "9d66f165-a019-4c93-8412-57b9e7ee21e6", "domain": "news.com.au", "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:59:58.402439+00:00", "summary": "news.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "43576715.spf06.hubspotemail.net", "_netblocks.google.com", "_netblocks2.google.com", "_netblocks3.google.com", "amazonses.com", "cust-spf.exacttarget.com", "spf-00596a01.pphosted.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "hubspot", "salesforce" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "43576715.spf06.hubspotemail.net", "_netblocks.google.com", "_netblocks2.google.com", "_netblocks3.google.com", "amazonses.com", "cust-spf.exacttarget.com", "spf-00596a01.pphosted.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "hubspot", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "a35cd8ad-93a2-436c-bf63-26f231052335", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a6bfc120-59f1-4bcf-8ba8-75b5e6527333", "domain": "nrma.com.au", "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:56:12.208498+00:00", "summary": "nrma.com.au: a_records changed", "old_value": [ "23.203.238.223" ], "new_value": [ "23.207.130.176" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "856f933c-909d-4a14-a328-57d931bcc419", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "893c0285-3d5b-4c64-a409-0cb1c5acec88", "domain": "officeworks.com.au", "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:55:23.710556+00:00", "summary": "officeworks.com.au: a_records changed", "old_value": [ "108.138.246.22", "108.138.246.76", "108.138.246.80", "108.138.246.9" ], "new_value": [ "3.170.103.109", "3.170.103.29", "3.170.103.5", "3.170.103.88" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "3ae519b2-2bd8-44f2-a15e-9fb7719b3657", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "8dddb1ab-80b3-4457-8e27-f596d4d7a895", "domain": "optus.com.au", "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b", "cohort": "telecom-watchlist", "cohort_label": "Telecom Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:57:39.659324+00:00", "summary": "optus.com.au: a_records changed", "old_value": [ "23.219.64.16", "23.219.64.33", "23.219.64.34", "23.219.64.48", "23.219.64.59", "23.219.64.66", "23.219.64.82" ], "new_value": [ "23.219.64.34", "23.219.64.41", "23.219.64.48", "23.219.64.56", "23.219.64.57", "23.219.64.58", "23.219.64.59", "23.219.64.64", "23.219.64.65" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "6de1cd10-ac58-409b-8f2a-c1c695d5c0f4", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "6b5019b8-94d7-4708-8274-ebfb37044bb4", "domain": "optus.com.au", "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b", "cohort": "telecom-watchlist", "cohort_label": "Telecom Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:40.804003+00:00", "summary": "optus.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "au._netblocks.mimecast.com", "mktomail.com" ], "identity": { "state": "multiple", "provider_ids": [ "adobe", "mimecast" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "au._netblocks.mimecast.com", "mktomail.com" ], "identity": { "state": "multiple", "provider_ids": [ "adobe", "mimecast" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "6de1cd10-ac58-409b-8f2a-c1c695d5c0f4", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "5f45cee2-4fc7-4b49-8b43-0f70ad1b7d4c", "domain": "originenergy.com.au", "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:54:57.523695+00:00", "summary": "originenergy.com.au: a_records changed", "old_value": [ "3.167.163.12", "3.167.163.17", "3.167.163.49", "3.167.163.64" ], "new_value": [ "3.161.213.114", "3.161.213.123", "3.161.213.71", "3.161.213.87" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "35ddffee-6105-4f4f-b8f9-d14375502503", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "d3cb42ba-63fc-4380-ba20-c0d8609a6f37", "domain": "originenergy.com.au", "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:54:58.549268+00:00", "summary": "originenergy.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "esa.hc852-37.ap.iphmx.com", "mailcontrol.com", "spf.boreal-is.com", "spf.protection.outlook.com", "spfa.originenergy.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "sap" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "esa.hc852-37.ap.iphmx.com", "mailcontrol.com", "spf.boreal-is.com", "spf.protection.outlook.com", "spfa.originenergy.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "sap" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "35ddffee-6105-4f4f-b8f9-d14375502503", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "aa205008-784c-4671-8129-e998c60fd563", "domain": "qantas.com.au", "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:55:14.569658+00:00", "summary": "qantas.com.au: a_records changed", "old_value": [ "23.222.241.147", "23.222.241.150" ], "new_value": [ "23.53.11.140", "23.53.11.144" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "0f12a376-79d6-4e15-b587-720f0b5b7f37", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "2ef2cbbd-dfe6-4bd4-9d4f-9817961b70cb", "domain": "qantas.com.au", "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:55:15.230796+00:00", "summary": "qantas.com.au: aaaa_records changed", "old_value": [ "2600:1418:a000:c::17c1:c8a3", "2600:1418:a000:c::17c1:c8ac" ], "new_value": [ "2600:1408:c400:c::17cd:6895", "2600:1408:c400:c::17cd:6896" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "0f12a376-79d6-4e15-b587-720f0b5b7f37", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "987bb75f-0d22-4c09-80ef-86a49ac850f1", "domain": "realestate.com.au", "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:55:02.770474+00:00", "summary": "realestate.com.au: a_records changed", "old_value": [ "23.11.207.231", "23.11.207.233" ], "new_value": [ "23.219.89.133", "23.219.89.142" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "8053d904-066a-4f51-8426-da76d50f51da", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "9f6dff2c-68ac-4463-aed0-5e611a7a2742", "domain": "realestate.com.au", "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:55:03.071495+00:00", "summary": "realestate.com.au: aaaa_records changed", "old_value": [ "2600:1406:3a00:33::170b:cfe7", "2600:1406:3a00:33::170b:cfe9" ], "new_value": [ "2600:1404:ec00:25::17dc:a307", "2600:1404:ec00:25::17dc:a313" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "8053d904-066a-4f51-8426-da76d50f51da", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "ebb1a013-2f04-41b1-97bc-6d9c5b3f02c5", "domain": "reece.com.au", "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:59:33.412451+00:00", "summary": "reece.com.au: a_records changed", "old_value": [ "52.85.132.114", "52.85.132.26", "52.85.132.42", "52.85.132.78" ], "new_value": [ "18.155.192.14", "18.155.192.17", "18.155.192.30", "18.155.192.42" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "7ef1f7bf-fd9d-4196-8abf-c28f82c74e01", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a6c8ac14-99eb-478b-9b3c-03d60c545695", "domain": "rspca.org.au", "domain_id": "5daea98a-9488-4953-ab17-dde64c75686a", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:20.711383+00:00", "summary": "rspca.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "servers.mcsv.net", "shops.shopify.com", "spf.messagelabs.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "broadcom", "mailchimp", "microsoft", "shopify" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "servers.mcsv.net", "shops.shopify.com", "spf.messagelabs.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "broadcom", "mailchimp", "microsoft", "shopify" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "03092400-6401-4c7e-a73a-319f4ebecd7f", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "c9f2562b-fe5b-4985-9388-6f950b1e2f7f", "domain": "sydneywater.com.au", "domain_id": "06f90907-06cf-4a2b-9527-328b7171e325", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:45.608735+00:00", "summary": "sydneywater.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.qualtrics.com", "amazonses.com", "nw010.com", "spf.protection.outlook.com", "spf01.sabacloud.com", "spf02.sabacloud.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "microsoft", "qualtrics" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.qualtrics.com", "amazonses.com", "nw010.com", "spf.protection.outlook.com", "spf01.sabacloud.com", "spf02.sabacloud.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "microsoft", "qualtrics" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "a6f962c5-294e-4803-bbd1-a0ee92a02119", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a9024fb2-bd0c-40ac-bf5d-da136d163096", "domain": "target.com.au", "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:59:28.125032+00:00", "summary": "target.com.au: a_records changed", "old_value": [ "69.192.139.225", "69.192.139.240" ], "new_value": [ "23.209.84.140", "23.209.84.150" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "f2cb6eae-2b0c-4d46-a718-9f3069a8ec41", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "004aec5d-55ac-4e57-bd89-971ff8bb3a74", "domain": "target.com.au", "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:59:28.729732+00:00", "summary": "target.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "app.sgizmo.com", "cust-spf.exacttarget.com", "spf-0032cc01.pphosted.com", "spf-004f2a01.pphosted.com", "spf-a.rnmk.com", "spf-b.rnmk.com", "spf.protection.outlook.com", "spf1.fraedom.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "app.sgizmo.com", "cust-spf.exacttarget.com", "spf-0032cc01.pphosted.com", "spf-004f2a01.pphosted.com", "spf-a.rnmk.com", "spf-b.rnmk.com", "spf.protection.outlook.com", "spf1.fraedom.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "f2cb6eae-2b0c-4d46-a718-9f3069a8ec41", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "c5408713-8e47-4828-afab-4105375935fe", "domain": "theaustralian.com.au", "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:58:56.960795+00:00", "summary": "theaustralian.com.au: a_records changed", "old_value": [ "23.222.204.163" ], "new_value": [ "23.37.16.152" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "889b3483-fd68-4e9a-8a12-c1b9b0bf1099", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "dea0cdba-1efa-4d6e-bc3e-79d8ada26c15", "domain": "theaustralian.com.au", "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-08T19:58:57.794533+00:00", "summary": "theaustralian.com.au: aaaa_records changed", "old_value": [ "2600:1406:35:180::ebe", "2600:1406:35:182::ebe", "2600:1406:35:184::ebe", "2600:1406:35:189::ebe", "2600:1406:35:193::ebe" ], "new_value": [ "2600:1409:9800:1683::ebe", "2600:1409:9800:1686::ebe", "2600:1409:9800:1689::ebe", "2600:1409:9800:168a::ebe", "2600:1409:9800:168d::ebe" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "889b3483-fd68-4e9a-8a12-c1b9b0bf1099", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "e81161a0-a39e-43b5-987e-4c1f7a04872d", "domain": "uwa.edu.au", "domain_id": "78ac4603-517d-4bda-819d-60652a59246b", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:58:57.354117+00:00", "summary": "uwa.edu.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.qualtrics.com", "sendgrid.net", "servers.mcsv.net", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailchimp", "microsoft", "qualtrics", "twilio-sendgrid" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.qualtrics.com", "sendgrid.net", "servers.mcsv.net", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailchimp", "microsoft", "qualtrics", "twilio-sendgrid" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "91d103e1-3b30-4093-8110-1f1d76111665", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "a20c690a-cfbc-4458-a8d1-dc4608eb58d9", "domain": "vigogroup.com.au", "domain_id": "2f2c1eaa-debc-4341-83e4-40e2e13b6bb9", "cohort": "founder-surface", "cohort_label": "Founder Surface", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:59:19.237400+00:00", "summary": "vigogroup.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.google.com", "helpscoutemail.com", "relay.tppwholesale.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "google", "help-scout" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.google.com", "helpscoutemail.com", "relay.tppwholesale.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "google", "help-scout" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "8fbc9c84-021b-40f6-890a-716096afe043", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "1f0ccc6d-e5ed-4eb0-840b-c9d435fe5615", "domain": "westpac.com.au", "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:58:44.973196+00:00", "summary": "westpac.com.au: a_records changed", "old_value": [ "65.8.20.119", "65.8.20.123", "65.8.20.125", "65.8.20.66" ], "new_value": [ "65.8.180.4", "65.8.180.50", "65.8.180.71", "65.8.180.86" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d693b9bf-1a1c-445a-adc1-2705343cedb7", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "ca7d5bc5-dd7b-472a-8e2e-2b0f17c38435", "domain": "woolworths.com.au", "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:57:19.682471+00:00", "summary": "woolworths.com.au: a_records changed", "old_value": [ "184.28.3.190" ], "new_value": [ "23.14.141.192" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "493fa17f-1c56-4410-9bb7-ab1e94f7c9bf", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "49d837d5-a0d7-4f65-bca6-723c0b062059", "domain": "woolworths.com.au", "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-08T19:57:20.594501+00:00", "summary": "woolworths.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "_spf.woolworths.com.au", "spf-00331a03.pphosted.com", "woolworthslimited-voc-email-spf1.cname.sc4.medallia.com" ], "identity": { "state": "multiple", "provider_ids": [ "salesforce", "sap" ] }, "catalogue_hash": "042ec8b03f988ec017a69d9900d6aed5df2c1c9ad80f2a5cb9f4c72c1be6c115", "catalogue_version": "1.2.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "_spf.woolworths.com.au", "spf-00331a03.pphosted.com", "woolworthslimited-voc-email-spf1.cname.sc4.medallia.com" ], "identity": { "state": "multiple", "provider_ids": [ "salesforce", "sap" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "493fa17f-1c56-4410-9bb7-ab1e94f7c9bf", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "834362cd-313a-40e6-9d51-a55ef1fa8651", "domain": "xero.com.au", "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7", "cohort": "saas-watchlist", "cohort_label": "Saas Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T19:58:28.345868+00:00", "summary": "xero.com.au: a_records changed", "old_value": [ "23.211.139.202", "23.211.139.204" ], "new_value": [ "23.48.203.17", "23.48.203.9" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "bea2f066-7843-4b49-aaab-70ad2d446ea1", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true } ], "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default." }