{
  "domain": "beyondblue.org.au",
  "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
  "run_date": "2026-08-28",
  "cohort": "nfp-watchlist",
  "cohort_label": "Nfp Watchlist",
  "current_posture": {
    "certainty": "Observed",
    "fields": {
      "registrar_name": "Corporation Service Company (Aust) Pty Ltd",
      "nameservers": [
        "dns1.cscdns.net",
        "dns2.cscdns.net"
      ],
      "a_records": [
        "64.239.109.1",
        "76.76.21.21"
      ],
      "aaaa_records": [],
      "mx_records": [
        "10 beyondblue-org-au.mail.protection.outlook.com"
      ],
      "txt_records": [
        "002dklqd7p2l7nnq3hkr2bxch6zyb2pt",
        "5d3pt0xg9zqp8fkkyfpg8qs6976lq01t",
        "5pl9jymrv4c7kr6mqc2nlm0d2k9xk2fy",
        "7614zgrr1647fkthjv1z1htwnl26vqrh",
        "9vncplr85p648z9ycvx5gbdgd37f021p",
        "_2ek11p8tf1wsv923s9y2zmefeapy65z",
        "_2nj908ow4xv5rr3lpdwhko9y91nk2i4",
        "_a14zfwg9to17pal680s6wiain2hb8ed",
        "_ifctztk297qzwm4zmwyh5h79zxxa9go",
        "_kc2027h55irulx5iepu90qgs1t7vbgl",
        "_rf8x70pe1xhodps98x6ehh0j2p63t63",
        "_uekothjwq6h9wn2heh7jmpk7u5wv264",
        "_vs3ekapqf80q0wl53a1iomei0bwj9pc",
        "_wuv2ktndu5rr8oz5msob5fqqdl5m5iw",
        "atlassian-domain-verification=h7d/miks6p/1ijob3ac0rav7vdkow9hnq4wryweub9uzegimgjbfs8sltawghc4h",
        "bdb4g5r5vz19lwc8y51vt8nfqvclsspf",
        "fxxvs48mh5rkpn0x3j5cvxbgh4fbsv89",
        "google-site-verification=bj-rvugsctpx_rhe7umm0g7v42jqb03laoyvejmcec0",
        "google-site-verification=szd_timvwautr-tezhkkebings6uplh9xlp3gxwioxu",
        "gq328pm40tf9gpnnv0v0s9jzhtlp0mnb",
        "h7vj6d99hwqf375nv6zsrxz34qgm5pgb",
        "miro-verification=8b480b086feac7815b91349afc262ea49b0aa581",
        "sitecore-domain-verification=5b033146d2a94f06858517deba6346be",
        "tkzyktklhk0gj6gr4jdvg995hth1q7xw",
        "v=spf1 mx ip4:125.7.37.86 include:spf.au.exclaimer.net include:_spf.qp-mail.com.au include:spf.protection.outlook.com include:spf1.formassembly.com include:amazonses.com include:_spf.psm.knowbe4.com include:spfx.isentia.com include:_spf.salesforce.com -all"
      ],
      "dnssec_enabled": false,
      "dnssec_enabled_rdap": false,
      "dnskey_present": false,
      "spf_present": true,
      "dmarc_present": true,
      "dns_provider": "CSC / Enterprise DNS",
      "email_provider": "Microsoft 365",
      "rdap_availability": "available"
    }
  },
  "latest_material_event": {
    "id": "ee00a586-624f-4a96-aa52-46c4a1ed92eb",
    "domain": "beyondblue.org.au",
    "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
    "cohort": "nfp-watchlist",
    "cohort_label": "Nfp Watchlist",
    "event_type": "hosting_move_signal",
    "event_label": "Hosting Move Signal",
    "event_time": "2026-08-28T01:30:41.991417+00:00",
    "summary": "beyondblue.org.au: nameserver and DNS provider changed together",
    "old_value": {
      "nameservers": [
        "ns0.telstra.net",
        "ns1.telstra.net"
      ],
      "dns_provider": "Telstra"
    },
    "new_value": {
      "nameservers": [
        "dns1.cscdns.net",
        "dns2.cscdns.net"
      ],
      "dns_provider": "CSC / Enterprise DNS"
    },
    "category": "derived",
    "severity": "high",
    "materiality": "material",
    "event_scope": "observatory",
    "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
    "signal_tier": "tier_2",
    "signal_label": "Meaningful infrastructure movement",
    "certainty": "Observed",
    "visible_by_default": true,
    "collapse_by_default": false
  },
  "material_events": [
    {
      "id": "ee00a586-624f-4a96-aa52-46c4a1ed92eb",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-08-28T01:30:41.991417+00:00",
      "summary": "beyondblue.org.au: nameserver and DNS provider changed together",
      "old_value": {
        "nameservers": [
          "ns0.telstra.net",
          "ns1.telstra.net"
        ],
        "dns_provider": "Telstra"
      },
      "new_value": {
        "nameservers": [
          "dns1.cscdns.net",
          "dns2.cscdns.net"
        ],
        "dns_provider": "CSC / Enterprise DNS"
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7479f873-0b52-4e62-bf5f-9abbe729c532",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-08-28T01:30:41.714415+00:00",
      "summary": "beyondblue.org.au: dns_provider changed",
      "old_value": "Telstra",
      "new_value": "CSC / Enterprise DNS",
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "065a0627-44f5-4791-bc03-1af01c04e376",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-28T01:30:41.427966+00:00",
      "summary": "beyondblue.org.au: nameservers changed",
      "old_value": [
        "ns0.telstra.net",
        "ns1.telstra.net"
      ],
      "new_value": [
        "dns1.cscdns.net",
        "dns2.cscdns.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    }
  ],
  "supporting_events": [],
  "repeated_observations": [],
  "review_flags": [],
  "interpretation_labels": [
    "High-signal trust posture change",
    "Meaningful infrastructure movement"
  ],
  "method_note": "Observed public domain-layer signals only. Not an allegation, risk score, breach evidence, or proof of compromise."
}