{
  "run_date": "2026-07-02",
  "events": [
    {
      "id": "7a420456-b6ec-4acf-b2b2-97bb0e85ec18",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-01T19:10:58.342739+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a8a49c26-f94f-4bd4-911e-7d25c08b7c24",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "fdbdaa4c-6714-4ba0-8e78-5aff519f2513",
      "domain": "salvationarmy.org.au",
      "domain_id": "ac84277b-3efe-464b-8332-850ba8f55d0f",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-01T19:09:53.213093+00:00",
      "summary": "salvationarmy.org.au: nameservers changed",
      "old_value": [
        "ns.domainnetwork.se",
        "ns2.domainnetwork.se",
        "ns3.domainnetwork.com"
      ],
      "new_value": [
        "ns1-05.azure-dns.com",
        "ns2-05.azure-dns.net",
        "ns3-05.azure-dns.org",
        "ns4-05.azure-dns.info"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "26f0f606-a702-46b7-81f5-0b452c8a637b",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "d39a8cb1-e1fd-43fc-96be-d02ae2e4e968",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-01T19:12:56.728913+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "369118d9-e6ac-44c6-bc5d-8739d4943496",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "90b7b722-dfe9-4d3b-b9c5-ea4106195ad3",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-01T19:10:14.543367+00:00",
      "summary": "beyondblue.org.au: spf_present changed",
      "old_value": true,
      "new_value": false,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d893f8ac-6bf8-4bf5-99dc-73fbbc2e4c7d",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "8f335672-5932-47c1-b9ad-6777d0d152e9",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-01T19:09:29.769352+00:00",
      "summary": "servicesaustralia.gov.au: spf_present changed",
      "old_value": true,
      "new_value": false,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa8e1b19-a96a-477e-b4f6-be44a23a0fdf",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "d4aef9e7-5f99-4863-858d-094a4d2bff1d",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "dmarc_present_changed",
      "event_label": "DMARC presence change",
      "event_time": "2026-07-01T19:09:30.035475+00:00",
      "summary": "servicesaustralia.gov.au: dmarc_present changed",
      "old_value": true,
      "new_value": false,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa8e1b19-a96a-477e-b4f6-be44a23a0fdf",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7ba1dbf5-daf5-4d5e-a236-4c2eae240d6f",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-01T19:10:14.021044+00:00",
      "summary": "beyondblue.org.au: mx_records changed",
      "old_value": [
        "10 beyondblue-org-au.mail.protection.outlook.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d893f8ac-6bf8-4bf5-99dc-73fbbc2e4c7d",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "391347d3-a99c-4c49-a4d5-c37b665641a3",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-01T19:09:28.252024+00:00",
      "summary": "servicesaustralia.gov.au: mx_records changed",
      "old_value": [
        "10 servicesaustralia-gov-au.mail.protection.outlook.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa8e1b19-a96a-477e-b4f6-be44a23a0fdf",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "e676ff57-d178-48a4-89cc-28054868a852",
      "domain": "salvationarmy.org.au",
      "domain_id": "ac84277b-3efe-464b-8332-850ba8f55d0f",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-07-01T19:09:54.247656+00:00",
      "summary": "salvationarmy.org.au: nameserver and DNS provider changed together",
      "old_value": {
        "nameservers": [
          "ns.domainnetwork.se",
          "ns2.domainnetwork.se",
          "ns3.domainnetwork.com"
        ],
        "dns_provider": "CSC / Domain Network"
      },
      "new_value": {
        "nameservers": [
          "ns1-05.azure-dns.com",
          "ns2-05.azure-dns.net",
          "ns3-05.azure-dns.org",
          "ns4-05.azure-dns.info"
        ],
        "dns_provider": "Azure DNS"
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "26f0f606-a702-46b7-81f5-0b452c8a637b",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "353b2ca2-ca58-4b4d-b87e-7791514e95b5",
      "domain": "salvationarmy.org.au",
      "domain_id": "ac84277b-3efe-464b-8332-850ba8f55d0f",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-07-01T19:09:53.504050+00:00",
      "summary": "salvationarmy.org.au: dns_provider changed",
      "old_value": "CSC / Domain Network",
      "new_value": "Azure DNS",
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "26f0f606-a702-46b7-81f5-0b452c8a637b",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "16ee5e4c-5f84-40fe-b374-750a3f43a5c9",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-01T19:10:14.278591+00:00",
      "summary": "beyondblue.org.au: email_provider changed",
      "old_value": "Microsoft 365",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d893f8ac-6bf8-4bf5-99dc-73fbbc2e4c7d",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ae2995cc-895f-4ad1-aed6-89a4ee7314fa",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-01T19:09:29.028436+00:00",
      "summary": "servicesaustralia.gov.au: email_provider changed",
      "old_value": "Microsoft 365",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa8e1b19-a96a-477e-b4f6-be44a23a0fdf",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "d1eefbb3-dde8-4519-af23-f647dcda7d70",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:11:15.081334+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.61.212.130"
      ],
      "new_value": [
        "173.223.0.97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c99d93e3-98fc-4341-9e47-d48e8f7adc56",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "82a77b72-8e7b-4e7e-a0a7-8cca0ab859b0",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:08:49.800407+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.221.241.238"
      ],
      "new_value": [
        "184.29.91.231"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a686775-db43-42f4-a223-2a704026eb77",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b0d28e73-7707-4f7f-9524-35bcb847da39",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:11:36.948598+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3092e1ae-e6c6-4442-beaf-c5118879c43a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "14664908-746d-42d6-b213-5030cf029481",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:12:35.381392+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "184.29.111.204"
      ],
      "new_value": [
        "184.29.91.199"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6ef02ecb-6702-486d-a184-b87f5278ea1a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7ffd5fd4-60df-4b68-9852-f836b938af2e",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:10:50.988249+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1800:2:88:1b80:93a1",
        "2600:9000:2348:1c00:2:88:1b80:93a1",
        "2600:9000:2348:8400:2:88:1b80:93a1",
        "2600:9000:2348:8c00:2:88:1b80:93a1",
        "2600:9000:2348:b000:2:88:1b80:93a1",
        "2600:9000:2348:cc00:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:f000:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:3c00:2:88:1b80:93a1",
        "2600:9000:2348:5800:2:88:1b80:93a1",
        "2600:9000:2348:8a00:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:9a00:2:88:1b80:93a1",
        "2600:9000:2348:ae00:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6efbcbe8-a4d4-462f-ba2a-0a90187c6910",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "85f533db-1ae7-490c-8532-a0b82c37a0ff",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:13:40.881321+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2aebd5c0-b97a-4574-9c40-7b8776491a9b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f1fbb8d5-9d00-4eb6-86b3-2c163aeba92b",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:10:47.766178+00:00",
      "summary": "crikey.com.au: a_records changed",
      "old_value": [
        "192.0.66.227"
      ],
      "new_value": [
        "192.0.66.192"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6386c072-d6f3-4d43-8e7c-16fc19b47c23",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3696ffe4-e63e-4b1a-80d1-6dbaf67c8d17",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:11:53.423072+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.32.230.101",
        "13.32.230.103",
        "13.32.230.124",
        "13.32.230.49"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "85259946-cebe-4374-9f0a-17731aede596",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d1d0f1fe-5efe-4c37-accb-503e3d9d1de3",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:12:26.788040+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.223.240.77",
        "23.223.240.87"
      ],
      "new_value": [
        "23.223.241.141",
        "23.223.241.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "69e7ea67-21ff-495c-9b38-b3012a3452a4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d95f8063-4654-425a-93bf-02ebdb2174e2",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:12:27.088389+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:27::17d3:7cc7",
        "2600:1405:7400:27::17d3:7cca"
      ],
      "new_value": [
        "2600:1418:a000:15::1726:6db0",
        "2600:1418:a000:15::1726:6db1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "69e7ea67-21ff-495c-9b38-b3012a3452a4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dbb16138-6461-4b04-8a7f-104c794d6f92",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:08:21.777156+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.53.11.172",
        "23.53.11.176"
      ],
      "new_value": [
        "23.222.17.68",
        "23.222.17.74"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a7a678b-c1a4-4ec8-b22e-f73832d234a0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8b532d5a-8cd9-408e-b60c-9d8244bb231f",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:08:22.089055+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b85",
        "2600:1408:ec00:2f::1735:b91"
      ],
      "new_value": [
        "2a02:26f0:3780:18::5f65:74cb",
        "2a02:26f0:3780:18::5f65:74cf"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a7a678b-c1a4-4ec8-b22e-f73832d234a0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "61aa7a5c-2a71-4824-983c-4f52c9a12583",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:08:28.609179+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.212.249.210",
        "23.212.249.218"
      ],
      "new_value": [
        "23.200.156.17",
        "23.200.156.21"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c24c53a5-0ee1-4c8e-9502-913a4699b608",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d739030c-1b44-4159-b86d-4a4038284203",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-06-30T19:09:30.712648+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b89::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8c::ebe",
        "2600:1405:7400:b8f::ebe"
      ],
      "new_value": [
        "2600:1405:7400:b82::ebe",
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8c::ebe",
        "2600:1405:7400:b8d::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "282ff557-6326-4924-bcf8-cec43c23b2c2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dcb32f6a-0c10-49dc-9b26-b1b7e3312ba2",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:14:02.232150+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "184.29.90.166"
      ],
      "new_value": [
        "23.61.2.166"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1e1be393-67d2-4e05-bb44-108960b48518",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f214202c-5eb5-4502-a4b4-92e36744eb54",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:14:02.541919+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:b82::ebe",
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8c::ebe",
        "2600:1405:7400:b8d::ebe"
      ],
      "new_value": [
        "2600:1418:a000:586::ebe",
        "2600:1418:a000:589::ebe",
        "2600:1418:a000:599::ebe",
        "2600:1418:a000:5ae::ebe",
        "2600:1418:a000:5b4::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1e1be393-67d2-4e05-bb44-108960b48518",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f017ffa3-0cc6-4fb6-9628-8d8f0c10a945",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:09:49.851375+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.56.124.203"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "91a2cee7-740d-4586-a613-cea1e9758437",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3064f7e0-3948-41b9-ab92-473d8e36fb28",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:09:51.803253+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "new_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3f583994-7520-4dad-9a65-cabb8f89c63f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "42db3403-9d12-4a7a-963d-b18e1fdb4ac8",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:08:54.573993+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "new_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bae95034-fc84-4c6b-8aab-e29ae146b3ce",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "95765a4f-ed18-4ec4-b979-98737c172888",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:09:06.004746+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.12.147.134",
        "23.12.147.158"
      ],
      "new_value": [
        "23.219.89.18",
        "23.219.89.22"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f46e2bc6-76c4-46dd-b1a0-30cf3e049f64",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "747f68da-2566-4920-970b-77ecb86d818d",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:09:06.301280+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:2f::17c3:258c",
        "2600:1408:5400:2f::17c3:2590"
      ],
      "new_value": [
        "2600:1407:3c00:1874::17d2:f4c5",
        "2600:1407:3c00:1874::17d2:f4d8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f46e2bc6-76c4-46dd-b1a0-30cf3e049f64",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3b622518-24ac-4cae-97f3-bc0f192fada2",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:09:36.444271+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.48.104.214",
        "23.55.176.186"
      ],
      "new_value": [
        "23.212.62.202",
        "23.212.62.205"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b70ee1d6-46cc-4b3b-81a2-c12c9688608b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "11956d32-94d6-44ea-aa2b-ef6932287dd4",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:09:36.711097+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "new_value": [
        "2600:1406:3a00:33::170b:cfe7",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b70ee1d6-46cc-4b3b-81a2-c12c9688608b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b25c1df1-a12a-4a70-b438-32224b802655",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:13:34.631361+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "52.222.205.112",
        "52.222.205.119",
        "52.222.205.58",
        "52.222.205.81"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a57a00f9-8f79-4a3e-890f-1a047e39b899",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e989c8af-4793-41ab-b5e4-0e9d6aca42a0",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:09:27.491886+00:00",
      "summary": "servicesaustralia.gov.au: a_records changed",
      "old_value": [
        "13.236.242.190",
        "54.206.239.18",
        "54.252.75.26"
      ],
      "new_value": [],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa8e1b19-a96a-477e-b4f6-be44a23a0fdf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4146f74e-6541-4d6a-9544-a3f957b0995c",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:12:56.583344+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.198.7.169",
        "23.198.7.171"
      ],
      "new_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d3cdf62c-1f08-4d4b-90d1-47fdcb860071",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b6681bb4-a21f-40fc-8b0a-f6fee6071194",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:13:01.747978+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "184.29.110.168"
      ],
      "new_value": [
        "184.29.90.166"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "52f9b616-621e-4561-9e20-425347828f55",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a8ad980f-a73d-4038-b7b7-0d13cc289071",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:13:02.055496+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:b81::ebe",
        "2600:1405:7400:b83::ebe",
        "2600:1405:7400:b85::ebe",
        "2600:1405:7400:b87::ebe",
        "2600:1405:7400:b88::ebe"
      ],
      "new_value": [
        "2600:1418:a000:488::ebe",
        "2600:1418:a000:48a::ebe",
        "2600:1418:a000:48f::ebe",
        "2600:1418:a000:4af::ebe",
        "2600:1418:a000:4b8::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "52f9b616-621e-4561-9e20-425347828f55",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5fb0a1d3-a096-4e42-917d-98a4a42eaaee",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:12:49.032077+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "3.161.225.106",
        "3.161.225.15",
        "3.161.225.16",
        "3.161.225.33"
      ],
      "new_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "68afb0c7-44ec-480e-9da7-ff21cf8dbd23",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d9c052c3-45fe-4e9d-9f8e-42eef336f9de",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:11:38.768787+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "72.247.97.144"
      ],
      "new_value": [
        "184.29.91.199"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1719c880-1fa1-44ba-a849-cdd4e60a0e4d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0f9f87d6-99ba-482d-bcbc-5a55deca7d3d",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-01T19:12:05.765145+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.48.104.213",
        "23.55.176.186"
      ],
      "new_value": [
        "23.67.33.26",
        "23.67.33.37"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "96b5efc3-a85a-4d80-aa4e-bb966ba86145",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}