{ "run_date": "2026-09-10", "events": [ { "id": "81df264f-bfd7-44a7-ab1a-c33c903c499a", "domain": "carsales.com.au", "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "rdap_status_changed", "event_label": "RDAP status change", "event_time": "2026-09-09T19:50:46.683382+00:00", "summary": "carsales.com.au: rdap_status changed", "old_value": [ "client delete prohibited", "server renew prohibited" ], "new_value": [ "server renew prohibited" ], "category": "status", "severity": "medium", "materiality": "material", "event_scope": "observatory", "snapshot_id": "4b555a76-9d36-4ce7-b108-929714e71a88", "signal_tier": "tier_1", "signal_label": "High-signal trust posture change", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "b552de20-8f70-4118-a046-91842fcb68cb", "domain": "starlight.org.au", "domain_id": "88ed77c1-f653-452b-8127-07da4752d340", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "mx_changed", "event_label": "Mail exchange change", "event_time": "2026-09-09T19:46:30.513697+00:00", "summary": "starlight.org.au: mx_records changed", "old_value": [ "0 starlight-org-au.mail.protection.outlook.com", "20 smtp1.mke.securence.com" ], "new_value": [ "0 starlight-org-au.mail.protection.outlook.com" ], "category": "mail", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "4ec5af27-b53c-4a11-a7b5-fdc6d65c1713", "signal_tier": "tier_1", "signal_label": "High-signal trust posture change", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "5133acc8-ccd5-4259-9298-96b708ec12f2", "domain": "starlight.org.au", "domain_id": "88ed77c1-f653-452b-8127-07da4752d340", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "email_provider_changed", "event_label": "Email provider change", "event_time": "2026-09-09T19:46:32.050930+00:00", "summary": "starlight.org.au: inbound_mail provider association changed with observed infrastructure", "old_value": { "targets": [ "smtp1.mke.securence.com", "starlight-org-au.mail.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "securence" ] } }, "new_value": { "targets": [ "starlight-org-au.mail.protection.outlook.com" ], "identity": { "state": "matched", "provider_ids": [ "microsoft" ] } }, "category": "provider", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "4ec5af27-b53c-4a11-a7b5-fdc6d65c1713", "signal_tier": "tier_2", "signal_label": "Meaningful infrastructure movement", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "cecdf4d1-bac3-4239-8a6a-4b94b82996e4", "domain": "abc.net.au", "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:47:38.053378+00:00", "summary": "abc.net.au: a_records changed", "old_value": [ "23.222.200.128" ], "new_value": [ "184.30.152.92" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "75d8a94b-99e6-4857-9ec5-04968e5297d9", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "5574b117-4a65-42bd-90b1-f909678ff381", "domain": "act.gov.au", "domain_id": "842189c3-6270-4f2c-912e-d38e8351f563", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:49:14.599867+00:00", "summary": "act.gov.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "spf.act.gov.au", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailchimp", "microsoft" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "spf.act.gov.au", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailchimp", "microsoft" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "2a39a8b0-072f-4a50-9cbf-825b4e4f983c", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "318b668e-dc2c-47ad-9b4e-a965b8352b18", "domain": "anu.edu.au", "domain_id": "97c6d3bc-401c-4153-8608-09b3c7ebd664", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:45:12.450851+00:00", "summary": "anu.edu.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "4501nxl41s.powerspf.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "powerdmarc" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "4501nxl41s.powerspf.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "powerdmarc" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "249212c3-f47b-48fa-bdce-042ec60cdcfc", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "2e35a26b-0125-4788-8891-cdd2b0b1ba87", "domain": "auspost.com.au", "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:48:45.356198+00:00", "summary": "auspost.com.au: a_records changed", "old_value": [ "3.167.99.106", "3.167.99.18", "3.167.99.6", "3.167.99.72" ], "new_value": [ "3.175.34.33", "3.175.34.37", "3.175.34.65", "3.175.34.75" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "5da1c9ef-c060-4d40-b486-0471794bd6f2", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "ee4684bc-e978-4794-a736-b54b548473b6", "domain": "bigw.com.au", "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:49:08.547531+00:00", "summary": "bigw.com.au: a_records changed", "old_value": [ "23.37.17.163" ], "new_value": [ "23.48.9.159" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "e536f9b3-e2d9-4958-9fa2-9eedcd52bfab", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "2ded2d4c-a7d5-4e47-8269-58a17c46bf65", "domain": "care.org.au", "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:48:01.308120+00:00", "summary": "care.org.au: aaaa_records changed", "old_value": [ "2600:9000:2348:1200:2:88:1b80:93a1", "2600:9000:2348:1600:2:88:1b80:93a1", "2600:9000:2348:2800:2:88:1b80:93a1", "2600:9000:2348:4c00:2:88:1b80:93a1", "2600:9000:2348:4e00:2:88:1b80:93a1", "2600:9000:2348:5200:2:88:1b80:93a1", "2600:9000:2348:7c00:2:88:1b80:93a1", "2600:9000:2348:9e00:2:88:1b80:93a1" ], "new_value": [ "2600:9000:2348:2a00:2:88:1b80:93a1", "2600:9000:2348:4800:2:88:1b80:93a1", "2600:9000:2348:7c00:2:88:1b80:93a1", "2600:9000:2348:8000:2:88:1b80:93a1", "2600:9000:2348:8400:2:88:1b80:93a1", "2600:9000:2348:b200:2:88:1b80:93a1", "2600:9000:2348:de00:2:88:1b80:93a1", "2600:9000:2348:fe00:2:88:1b80:93a1" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "520b125d-6f5b-466c-bc35-167d4df685b9", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3f3c868c-a9a4-4f6e-bad6-45be5fb5cf30", "domain": "carsales.com.au", "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-08T20:00:12.136296+00:00", "summary": "carsales.com.au: a_records changed", "old_value": [ "3.169.183.116", "3.169.183.17", "3.169.183.43", "3.169.183.56" ], "new_value": [ "18.238.96.73", "18.238.96.79", "18.238.96.90", "18.238.96.92" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "74ae08d7-b595-484f-a2eb-35cdefeb0505", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "dc35ee54-02bc-4696-9523-03082cde2a2a", "domain": "domain.com.au", "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:48:15.475583+00:00", "summary": "domain.com.au: a_records changed", "old_value": [ "18.160.213.127", "18.160.213.17", "18.160.213.27", "18.160.213.60" ], "new_value": [ "3.175.34.110", "3.175.34.111", "3.175.34.121", "3.175.34.24" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "339ee2d8-239a-45f1-b185-ba5d0c7881b0", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "12842cfb-9c70-4b86-8735-b88917ea0c91", "domain": "energyaustralia.com.au", "domain_id": "dd28baaa-508c-4773-aab1-3888253a85b5", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:45:55.431196+00:00", "summary": "energyaustralia.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "rnmk.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "oracle", "salesforce", "sap" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf-dc10.sapsf.com", "_spf.salesforce.com", "rnmk.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "microsoft", "oracle", "salesforce", "sap" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "31154369-897c-4b67-b4ce-d80b626969b2", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "b823e448-de95-4e3b-b194-56825fb07a22", "domain": "guidedogs.com.au", "domain_id": "ef03f821-a6c9-4e96-a75b-8c902a62a597", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:47:06.644259+00:00", "summary": "guidedogs.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.firebasemail.com", "amazonses.com", "anchor.net.au", "smtp.shopify.com", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "mailchimp", "microsoft" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.firebasemail.com", "amazonses.com", "anchor.net.au", "smtp.shopify.com", "spf.mandrillapp.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "amazon", "mailchimp", "microsoft" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "ace0c80f-c1ef-44b4-b6d3-20bc98a13270", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3422ed07-c485-4cc1-be77-7936d15eb68e", "domain": "homeaffairs.gov.au", "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:48:58.015051+00:00", "summary": "homeaffairs.gov.au: a_records changed", "old_value": [ "23.203.166.15", "23.203.166.30" ], "new_value": [ "23.39.174.150", "23.48.203.177", "23.48.203.178" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "de6d4eb6-1e2d-424f-aa06-aa6fd8cb3dbc", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "ca7c0ac3-9d36-4e50-a044-0b93569344dc", "domain": "homeaffairs.gov.au", "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:48:58.690142+00:00", "summary": "homeaffairs.gov.au: aaaa_records changed", "old_value": [ "2600:1406:3a00:33::170b:cfec", "2600:1406:3a00:33::170b:cfef" ], "new_value": [ "2600:1408:ec00:b::1727:ae96", "2600:1408:ec00:b::1730:cbb1", "2600:1408:ec00:b::1730:cbb2" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "de6d4eb6-1e2d-424f-aa06-aa6fd8cb3dbc", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "9082953a-56e3-4a6a-9159-c6e6aaf9b348", "domain": "jbhifi.com.au", "domain_id": "540d307e-224a-4afb-9f15-6161febb6b82", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:48:11.287140+00:00", "summary": "jbhifi.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.jbhifi.com.au", "spf.mandrillapp.com" ], "identity": { "state": "matched", "provider_ids": [ "mailchimp" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.jbhifi.com.au", "spf.mandrillapp.com" ], "identity": { "state": "matched", "provider_ids": [ "mailchimp" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "5e4148a6-e646-4a07-ad7d-e6547fd46142", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "832b3a0a-da6c-4aac-8619-344bd7b42aa3", "domain": "kmart.com.au", "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:45:08.641288+00:00", "summary": "kmart.com.au: a_records changed", "old_value": [ "23.48.203.106", "23.48.203.108" ], "new_value": [ "23.49.248.135", "23.49.248.159" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "edc13fec-f6fb-4b06-9d16-47dc3c15c32c", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "999276dc-4f24-4690-93f4-f2ba23eb9ccf", "domain": "kmart.com.au", "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:45:09.356815+00:00", "summary": "kmart.com.au: aaaa_records changed", "old_value": [ "2600:1408:c400:11::17cd:6b59", "2600:1408:c400:11::17cd:6b5b" ], "new_value": [ "2600:141b:1c00:27::17ce:ac14", "2600:141b:1c00:27::17ce:ac1a" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "edc13fec-f6fb-4b06-9d16-47dc3c15c32c", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "f7ee3ded-2e93-49a9-a9f1-70f2902a9fa6", "domain": "nab.com.au", "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:45:18.567555+00:00", "summary": "nab.com.au: a_records changed", "old_value": [ "23.48.203.145", "23.48.203.146" ], "new_value": [ "23.53.11.165", "23.53.11.179" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "e80cda31-65e9-4a94-9268-47664b124ad5", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "4f46f2d5-581b-47bc-a639-f7572ca2097b", "domain": "news.com.au", "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:51:00.973270+00:00", "summary": "news.com.au: a_records changed", "old_value": [ "23.37.16.152" ], "new_value": [ "23.34.124.164" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d211a549-2b71-4d35-ade6-0108a5a8f39f", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "557bbe96-437f-4d3b-8cbc-6a5408d939a8", "domain": "news.com.au", "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:51:02.651185+00:00", "summary": "news.com.au: aaaa_records changed", "old_value": [ "2600:1406:2e00:981::ebe", "2600:1406:2e00:984::ebe", "2600:1406:2e00:985::ebe", "2600:1406:2e00:989::ebe", "2600:1406:2e00:98a::ebe" ], "new_value": [ "2600:1408:c400:1685::ebe", "2600:1408:c400:168d::ebe", "2600:1408:c400:168e::ebe", "2600:1408:c400:168f::ebe", "2600:1408:c400:1690::ebe" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d211a549-2b71-4d35-ade6-0108a5a8f39f", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "f36e036d-2e96-41a7-a5f9-3781659c2e05", "domain": "nrma.com.au", "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:47:10.508072+00:00", "summary": "nrma.com.au: a_records changed", "old_value": [ "23.207.130.176" ], "new_value": [ "184.25.63.8" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "2991b293-d2f6-4b15-a012-a3aa5a084ad1", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "cfb8a557-8f39-4ab2-8670-7034eed3740e", "domain": "originenergy.com.au", "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:45:48.987886+00:00", "summary": "originenergy.com.au: a_records changed", "old_value": [ "3.161.213.114", "3.161.213.123", "3.161.213.71", "3.161.213.87" ], "new_value": [ "13.226.238.107", "13.226.238.125", "13.226.238.21", "13.226.238.7" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "652e1f67-ed29-4dc9-ac81-00f1750073ee", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "e319b151-f8fa-4cf6-bfe9-abd249634df2", "domain": "plan.org.au", "domain_id": "fb427da4-c9d3-4368-b400-3bee32ab8166", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:44:51.033312+00:00", "summary": "plan.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.atlassian.net", "_spf.salesforce.com", "mailgun.org", "sent-via.netsuite.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "atlassian", "mailgun", "microsoft", "oracle", "salesforce" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.atlassian.net", "_spf.salesforce.com", "mailgun.org", "sent-via.netsuite.com", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "atlassian", "mailgun", "microsoft", "oracle", "salesforce" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "eeb7721e-545c-41f1-a195-471dee2f948e", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "541506d3-2142-456d-b5dc-dade23be2339", "domain": "qantas.com.au", "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e", "cohort": "critical-infrastructure", "cohort_label": "Critical Infrastructure", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:46:10.207880+00:00", "summary": "qantas.com.au: a_records changed", "old_value": [ "23.53.11.140", "23.53.11.144" ], "new_value": [ "23.73.207.153" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "17250021-2803-4807-88f6-dcf29450d084", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "56033e77-b1c9-4f28-8d45-8db498f29450", "domain": "realestate.com.au", "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:45:50.628107+00:00", "summary": "realestate.com.au: a_records changed", "old_value": [ "23.219.89.133", "23.219.89.142" ], "new_value": [ "23.222.17.76", "23.222.17.78" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "1ee4d4be-75e4-461c-a38c-c05242436a09", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "364301f1-6da1-4567-89df-d1fa4e508b22", "domain": "realestate.com.au", "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:45:51.364913+00:00", "summary": "realestate.com.au: aaaa_records changed", "old_value": [ "2600:1404:ec00:25::17dc:a307", "2600:1404:ec00:25::17dc:a313" ], "new_value": [ "2600:1407:3c00:cc::172d:2ec9", "2600:1407:3c00:cc::172d:2ed2" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "1ee4d4be-75e4-461c-a38c-c05242436a09", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "05e92567-473e-4170-8344-d227c0f95092", "domain": "redcross.org.au", "domain_id": "101ee1f9-26ea-4599-be15-d864c301d35d", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:47:48.573881+00:00", "summary": "redcross.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_u.redcross.org.au._spf.smart.ondmarc.com" ], "identity": { "state": "matched", "provider_ids": [ "red-sift" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_u.redcross.org.au._spf.smart.ondmarc.com" ], "identity": { "state": "matched", "provider_ids": [ "red-sift" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "881907e2-8c64-43dc-8ee3-3bb60eb75289", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "5a1a86b9-e7c7-49be-9e3d-b6925c1181fe", "domain": "reece.com.au", "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:50:26.175536+00:00", "summary": "reece.com.au: a_records changed", "old_value": [ "18.155.192.14", "18.155.192.17", "18.155.192.30", "18.155.192.42" ], "new_value": [ "18.165.83.124", "18.165.83.31", "18.165.83.8", "18.165.83.91" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "08d79bbc-8701-4450-a174-fca98fd27c50", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "b6f1c867-536b-4f7a-9fcd-0b6e32aeb93a", "domain": "salvationarmy.org.au", "domain_id": "ac84277b-3efe-464b-8332-850ba8f55d0f", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:47:14.695003+00:00", "summary": "salvationarmy.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "airdocs.biz", "mailgun.org", "salvationarmy.org.au._nspf.vali.email", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailgun", "microsoft", "valimail" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "airdocs.biz", "mailgun.org", "salvationarmy.org.au._nspf.vali.email", "spf.protection.outlook.com" ], "identity": { "state": "multiple", "provider_ids": [ "mailgun", "microsoft", "valimail" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "86134fcf-951e-427a-ac5a-1852b25877d7", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "851c9e39-2401-45c6-a711-3a1ebf03a24a", "domain": "starlight.org.au", "domain_id": "88ed77c1-f653-452b-8127-07da4752d340", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:46:32.311921+00:00", "summary": "starlight.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.createsend.com", "mailgun.org", "spf.emailsignatures365.com", "spf.mandrillapp.com", "spf.protection.outlook.com", "us-spf.email.litmos.com" ], "identity": { "state": "multiple", "provider_ids": [ "campaign-monitor", "mailchimp", "mailgun", "microsoft" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.createsend.com", "mailgun.org", "spf.emailsignatures365.com", "spf.mandrillapp.com", "spf.protection.outlook.com", "us-spf.email.litmos.com" ], "identity": { "state": "multiple", "provider_ids": [ "campaign-monitor", "mailchimp", "mailgun", "microsoft" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "4ec5af27-b53c-4a11-a7b5-fdc6d65c1713", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "c66b329d-6a36-4c18-a480-a2650fbf9e96", "domain": "theaustralian.com.au", "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:49:45.995086+00:00", "summary": "theaustralian.com.au: a_records changed", "old_value": [ "23.37.16.152" ], "new_value": [ "23.209.56.151" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "5bf97671-1803-4dad-a4f9-24f6e4af25ef", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3cf484b9-18a0-44c3-bef5-db6a4ee5f6a2", "domain": "theaustralian.com.au", "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a", "cohort": "media-watchlist", "cohort_label": "Media Watchlist", "event_type": "aaaa_changed", "event_label": "AAAA record change", "event_time": "2026-09-09T19:49:46.594339+00:00", "summary": "theaustralian.com.au: aaaa_records changed", "old_value": [ "2600:1409:9800:1683::ebe", "2600:1409:9800:1686::ebe", "2600:1409:9800:1689::ebe", "2600:1409:9800:168a::ebe", "2600:1409:9800:168d::ebe" ], "new_value": [ "2600:1408:c400:1680::ebe", "2600:1408:c400:1684::ebe", "2600:1408:c400:1687::ebe", "2600:1408:c400:168b::ebe", "2600:1408:c400:168c::ebe" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "5bf97671-1803-4dad-a4f9-24f6e4af25ef", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "2179eb43-86af-43ab-a984-dcba0acd80ff", "domain": "unicef.org.au", "domain_id": "7c398c8a-f1bf-4188-aa4a-61787d9cf870", "cohort": "nfp-watchlist", "cohort_label": "Nfp Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:49:04.695283+00:00", "summary": "unicef.org.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_u.unicef.org.au._spf.smart.ondmarc.com" ], "identity": { "state": "matched", "provider_ids": [ "red-sift" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_u.unicef.org.au._spf.smart.ondmarc.com" ], "identity": { "state": "matched", "provider_ids": [ "red-sift" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "24f19ff5-3a4f-4edd-bd75-cfd8c41116b2", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "469bc23b-4207-4fd1-8e18-3bc47e41ea71", "domain": "uq.edu.au", "domain_id": "133cd8ba-bef7-41e1-8ef4-240a893d4747", "cohort": "education-watchlist", "cohort_label": "Education Watchlist", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:50:18.397565+00:00", "summary": "uq.edu.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.uq.edu.au", "rnmk.com" ], "identity": { "state": "matched", "provider_ids": [ "oracle" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.uq.edu.au", "rnmk.com" ], "identity": { "state": "matched", "provider_ids": [ "oracle" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "c64c1f03-6510-4ace-82fb-01eb0bf54cd6", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "d34f8a12-2b02-4b15-adc7-cbe40e4e45ad", "domain": "vigogroup.com.au", "domain_id": "2f2c1eaa-debc-4341-83e4-40e2e13b6bb9", "cohort": "founder-surface", "cohort_label": "Founder Surface", "event_type": "provider_catalogue_reclassified", "event_label": "Provider Catalogue Reclassified", "event_time": "2026-09-09T19:49:57.546704+00:00", "summary": "vigogroup.com.au: spf_reference provider classification changed without observed target movement", "old_value": { "role": "spf_reference", "targets": [ "_spf.google.com", "helpscoutemail.com", "relay.tppwholesale.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "google", "help-scout", "tpp-wholesale" ] }, "catalogue_hash": "46aad1cc6ebe688f8ee26dc15c8d7a05f698ecd2ebfa7157db7ffcbce3b7f6a3", "catalogue_version": "1.3.0" }, "new_value": { "role": "spf_reference", "targets": [ "_spf.google.com", "helpscoutemail.com", "relay.tppwholesale.com.au" ], "identity": { "state": "multiple", "provider_ids": [ "google", "help-scout", "tpp-wholesale" ] }, "catalogue_hash": "359b0a0039abab09f23d572e399a18ec231613cd0ee5f7c8261449d3b3fc3807", "catalogue_version": "1.5.0" }, "category": "provider_metadata", "severity": "info", "materiality": "log_only", "event_scope": "collector", "snapshot_id": "63f50d45-32f8-4ed0-8500-e29919c9ba6c", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": true, "collapse_by_default": false }, { "id": "2630f6d2-c75d-479e-950f-c5a09b059857", "domain": "westpac.com.au", "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5", "cohort": "finance-watchlist", "cohort_label": "Finance Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:49:26.413266+00:00", "summary": "westpac.com.au: a_records changed", "old_value": [ "65.8.180.4", "65.8.180.50", "65.8.180.71", "65.8.180.86" ], "new_value": [ "18.165.83.47", "18.165.83.68", "18.165.83.74", "18.165.83.9" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "6a84115a-3747-4f19-86ae-1965a06f3730", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "ea523ee1-ff23-498c-952a-3dde4dd7dece", "domain": "woolworths.com.au", "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375", "cohort": "commercial-watchlist", "cohort_label": "Commercial Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:48:00.631545+00:00", "summary": "woolworths.com.au: a_records changed", "old_value": [ "23.14.141.192" ], "new_value": [ "23.45.73.167" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "60e53911-7209-4933-a7fe-6d309f0cbfb8", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true }, { "id": "3a1c8162-016f-489e-b0dc-c728b4ca1224", "domain": "xero.com.au", "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7", "cohort": "saas-watchlist", "cohort_label": "Saas Watchlist", "event_type": "a_changed", "event_label": "A record change", "event_time": "2026-09-09T19:48:59.954209+00:00", "summary": "xero.com.au: a_records changed", "old_value": [ "23.48.203.17", "23.48.203.9" ], "new_value": [ "184.30.150.103", "184.30.150.106" ], "category": "resolution", "severity": "info", "materiality": "supporting", "event_scope": "observatory", "snapshot_id": "d39e6e31-a668-4118-aae1-95f0cf953ba9", "signal_tier": "tier_3", "signal_label": "Routine or low-confidence churn", "certainty": "Observed", "visible_by_default": false, "collapse_by_default": true } ], "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default." }