{
  "run_date": "2026-07-10",
  "events": [
    {
      "id": "840e84c2-53b0-4106-a4e2-663b55f08c7c",
      "domain": "aemo.com.au",
      "domain_id": "c35fdf37-cb36-4b3d-9239-b24e3e3fc7db",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-07-09T19:01:49.599384+00:00",
      "summary": "aemo.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server renew prohibited"
      ],
      "new_value": [
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "b9d747ed-8a4f-4195-83e2-d7cd521511eb",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "737d132c-8122-467d-98dd-eb7c3325b5ea",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-07-09T19:02:07.985362+00:00",
      "summary": "domain.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "af42dde6-e20a-4949-8ac3-5978d9ca4f0a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "91512754-9690-497c-ab11-e179489c9c40",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-09T19:04:13.951051+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "cb4ad092-e7fb-4833-b6cc-144d599eb213",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7fea423b-31e7-4490-a82e-6dede0b0620b",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-09T19:03:45.512903+00:00",
      "summary": "reece.com.au: nameservers changed",
      "old_value": [],
      "new_value": [
        "ns-1495.awsdns-58.org",
        "ns-1659.awsdns-15.co.uk",
        "ns-280.awsdns-35.com",
        "ns-947.awsdns-54.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "09ec92da-2015-409b-a80f-5c7e29f2b712",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "95b1645c-c47d-4dac-a451-cad3a0c3128d",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-09T19:01:30.074675+00:00",
      "summary": "abc.net.au: mx_records changed",
      "old_value": [
        "10 mxa-0036d701.gslb.pphosted.com",
        "10 mxb-0036d701.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "361ceddb-0a44-45ba-80b3-c5aed977d1a6",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dc7abb55-88cc-4d39-ac73-db131e88f913",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-09T19:03:58.736210+00:00",
      "summary": "target.com.au: mx_records changed",
      "old_value": [
        "10 mxa-004f2a01.gslb.pphosted.com",
        "10 mxb-004f2a01.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "393e9dac-cf49-4b14-bbe2-c43e7081bc5b",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "64beaa71-3e6c-468b-aff2-84b995efd5a4",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-09T19:01:30.335890+00:00",
      "summary": "abc.net.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "361ceddb-0a44-45ba-80b3-c5aed977d1a6",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "97b23419-a197-4226-be58-d0239378ba04",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-09T19:03:59.072116+00:00",
      "summary": "target.com.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "393e9dac-cf49-4b14-bbe2-c43e7081bc5b",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dbf3e5bd-bc87-49c5-be9d-d2cd9cd30880",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:01:29.322837+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.45.136.113"
      ],
      "new_value": [
        "23.200.174.89"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "361ceddb-0a44-45ba-80b3-c5aed977d1a6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2f8ea8be-182a-455d-898b-6fe11aa0e423",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T18:59:42.112328+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.221.241.238"
      ],
      "new_value": [
        "23.8.67.222"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "61d53336-397b-459a-b84e-34371faf450a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "91549f2a-2063-403a-b3ec-a491f16cd4bb",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:02:47.616215+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "184.28.3.190"
      ],
      "new_value": [
        "96.16.194.121"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3dfdd74d-5776-4bd3-b969-a395379159e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ed0c71c3-48ed-4ca8-8295-7afd8c056d73",
      "domain": "blackheartsandsparrows.com.au",
      "domain_id": "32c6ab29-10e6-416e-bb9c-c9c4e38e4f92",
      "cohort": "platform-hosted",
      "cohort_label": "Platform Hosted",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:00:08.358983+00:00",
      "summary": "blackheartsandsparrows.com.au: aaaa_records changed",
      "old_value": [
        "2606:4700:3036::6815:5f26",
        "2606:4700:3037::ac43:8ec3"
      ],
      "new_value": [
        "2606:4700:130:436c:6f75:6466:6c61:7265"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "71430030-7347-465b-9b39-4fe51e7fba45",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c8c53e13-6a4d-4a03-a7af-12f23b07b74c",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:01:42.437757+00:00",
      "summary": "care.org.au: a_records changed",
      "old_value": [
        "18.160.213.111",
        "18.160.213.12",
        "18.160.213.120",
        "18.160.213.8"
      ],
      "new_value": [
        "18.67.39.35",
        "18.67.39.43",
        "18.67.39.68",
        "18.67.39.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f281839e-9bfd-451d-a5a5-5e533c734174",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "46cda19f-41f9-481c-98d0-2f7302635d49",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:01:43.183861+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:24d2:3a00:2:88:1b80:93a1",
        "2600:9000:24d2:400:2:88:1b80:93a1",
        "2600:9000:24d2:4e00:2:88:1b80:93a1",
        "2600:9000:24d2:6200:2:88:1b80:93a1",
        "2600:9000:24d2:7600:2:88:1b80:93a1",
        "2600:9000:24d2:9000:2:88:1b80:93a1",
        "2600:9000:24d2:dc00:2:88:1b80:93a1",
        "2600:9000:24d2:e000:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1400:2:88:1b80:93a1",
        "2600:9000:2348:3200:2:88:1b80:93a1",
        "2600:9000:2348:4600:2:88:1b80:93a1",
        "2600:9000:2348:6e00:2:88:1b80:93a1",
        "2600:9000:2348:7000:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:a600:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f281839e-9bfd-451d-a5a5-5e533c734174",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e15758e2-284d-46e0-a5ec-b4ef2143f08c",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:04:50.480205+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "43bd5853-0ac6-4f71-83ca-6907ac527dde",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f5d32af0-1085-43e1-95d3-e28119a4bb19",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:01:01.680916+00:00",
      "summary": "crikey.com.au: aaaa_records changed",
      "old_value": [
        "2a04:fa87:fffd::c000:42e7"
      ],
      "new_value": [
        "2a04:fa87:fffd::c000:42e3"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7dbbcb0a-dd8f-43bb-8ebf-1f2957173c7c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "04d19f7b-a141-4a58-b4b2-e5856aff7f36",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:02:07.293507+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "new_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "af42dde6-e20a-4949-8ac3-5978d9ca4f0a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7d9a560b-1d5f-4c25-9289-be5915d620a3",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:02:37.873375+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.216.145.13",
        "23.216.145.24"
      ],
      "new_value": [
        "23.49.250.179",
        "23.49.250.199"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "510e0e74-c3d6-4e65-8a57-751f1b8da94f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a475e2e8-78a2-47da-b641-d9c7d3227e54",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:02:38.679449+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:ac::172e:e4a4",
        "2600:1409:9800:ac::172e:e4aa"
      ],
      "new_value": [
        "2600:1408:ec00:c::1730:cb86",
        "2600:1408:ec00:c::1730:cb91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "510e0e74-c3d6-4e65-8a57-751f1b8da94f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "757e680a-6f77-4f38-beb1-2d914a984787",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T18:59:10.334872+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.212.251.70",
        "23.212.251.71"
      ],
      "new_value": [
        "23.45.46.205",
        "23.45.46.206"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "592fab7e-6887-48a9-8a5e-b17eabd72a03",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b6588a3c-a520-46ab-a585-2eaf0f64189c",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T18:59:10.635139+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b85",
        "2600:1408:ec00:2f::1735:b91"
      ],
      "new_value": [
        "2600:140a:5000:13::17de:11c8",
        "2600:140a:5000:13::17de:11ca"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "592fab7e-6887-48a9-8a5e-b17eabd72a03",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e5051445-e705-4999-a6b2-088a65a6094a",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T18:59:18.435598+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.48.104.212",
        "23.55.176.180"
      ],
      "new_value": [
        "23.200.156.69",
        "23.200.156.78"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "70bf781c-35da-405b-acfb-13af88ebc1c8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "374d176f-e4b5-4948-becc-dc9f7052720c",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-08T18:46:13.843331+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:980::ebe",
        "2600:1406:2e00:986::ebe",
        "2600:1406:2e00:987::ebe",
        "2600:1406:2e00:988::ebe",
        "2600:1406:2e00:98b::ebe"
      ],
      "new_value": [
        "2600:1409:3c00:b82::ebe",
        "2600:1409:3c00:b85::ebe",
        "2600:1409:3c00:b87::ebe",
        "2600:1409:3c00:b88::ebe",
        "2600:1409:3c00:b8e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b5892f85-9912-4a02-87c0-d92a01e6030b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "90e5a8dd-caae-4c42-ab6b-a2301f7d954c",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:04:14.228863+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "184.27.178.165"
      ],
      "new_value": [
        "104.95.237.90"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cb4ad092-e7fb-4833-b6cc-144d599eb213",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9b2e6413-5175-4c4c-ae43-af00957be497",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:04:14.508886+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:3c00:b82::ebe",
        "2600:1409:3c00:b85::ebe",
        "2600:1409:3c00:b87::ebe",
        "2600:1409:3c00:b88::ebe",
        "2600:1409:3c00:b8e::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:a80::ebe",
        "2600:1408:ec00:a82::ebe",
        "2600:1408:ec00:a84::ebe",
        "2600:1408:ec00:a88::ebe",
        "2600:1408:ec00:a8d::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cb4ad092-e7fb-4833-b6cc-144d599eb213",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6e97a128-fb0f-4081-b230-b55792d26f77",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:00:47.076413+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.207.130.176"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4e9a9884-9c3f-40b6-98f3-16af5fdf3d6a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "714ce357-a10b-401a-9348-b519a16cd2bc",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:02:11.695724+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "104.71.131.115",
        "104.71.131.3",
        "104.71.131.30",
        "104.71.131.88",
        "104.71.131.96",
        "23.220.77.42",
        "23.220.77.57",
        "23.220.77.65",
        "23.220.77.81"
      ],
      "new_value": [
        "23.62.8.36",
        "23.62.8.41",
        "23.62.8.42",
        "23.62.8.44",
        "23.62.8.53",
        "23.62.8.57",
        "23.62.8.58",
        "23.62.8.59",
        "23.62.8.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f839afa7-bdad-4ccd-9525-4146821cdc96",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "430a4e8e-6fbf-49bb-b04e-dddd1fbeda3c",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T18:59:47.122264+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "new_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "20e9f09f-b918-4c76-86ef-8d539a0731c6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0a7d935f-8ed5-432a-8581-2fe80139fed6",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:00:01.074039+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.212.250.27",
        "23.212.250.9"
      ],
      "new_value": [
        "184.25.59.136",
        "184.25.59.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8f135697-5619-45cd-802c-272d12608aaf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "38fdbfd9-7d9e-4eb8-aff0-9290a7a67352",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:00:01.373773+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:2f::17c3:258a",
        "2600:1408:5400:2f::17c3:2590"
      ],
      "new_value": [
        "2600:1407:3c00:1874::17d2:f4c5",
        "2600:1407:3c00:1874::17d2:f4d8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8f135697-5619-45cd-802c-272d12608aaf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ed321211-0271-459c-93aa-be74e29d225e",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T18:59:52.705827+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.216.149.140",
        "23.216.149.145"
      ],
      "new_value": [
        "173.223.234.146",
        "173.223.234.151"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1efabb67-92a3-45ad-89ee-b69906bcf8f4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "95c1bde0-4336-4c24-8fe4-8301ff0c2eb4",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T18:59:53.026368+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:28::17cb:a607",
        "2600:1406:2e00:28::17cb:a60e"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a17",
        "2600:1406:bc00:26::1723:1a28"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1efabb67-92a3-45ad-89ee-b69906bcf8f4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "18c20367-6925-48b1-90e6-4161b2a6240d",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:03:46.295869+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "09ec92da-2015-409b-a80f-5c7e29f2b712",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "652462a1-e713-4897-867d-78898429f250",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:03:58.419085+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.212.250.18",
        "23.212.250.20"
      ],
      "new_value": [
        "23.205.110.137",
        "23.205.110.143"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "393e9dac-cf49-4b14-bbe2-c43e7081bc5b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5f716922-27ce-44a2-819e-0f8cc488942d",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:03:13.207226+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "184.28.2.162"
      ],
      "new_value": [
        "104.95.237.90"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7e217665-64a6-4ed8-a3a1-9c714c4001e1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "03adba10-b5b2-4e49-bfaf-e02fe0087587",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-09T19:03:13.929075+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:3c00:b82::ebe",
        "2600:1409:3c00:b85::ebe",
        "2600:1409:3c00:b87::ebe",
        "2600:1409:3c00:b88::ebe",
        "2600:1409:3c00:b8e::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:283::ebe",
        "2600:1408:ec00:28c::ebe",
        "2600:1408:ec00:28e::ebe",
        "2600:1408:ec00:293::ebe",
        "2600:1408:ec00:29d::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7e217665-64a6-4ed8-a3a1-9c714c4001e1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a3258ab0-3260-4ff2-9ba0-24e9965d7a80",
      "domain": "transgrid.com.au",
      "domain_id": "7fe22d8a-20f2-42ac-a4cb-2f3fab248419",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:04:44.406421+00:00",
      "summary": "transgrid.com.au: a_records changed",
      "old_value": [
        "125.7.91.50",
        "203.32.247.90",
        "203.32.248.90"
      ],
      "new_value": [
        "125.7.91.50"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "10ef6ef6-bf6d-40f3-b4ac-706614e722cd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f5382e4d-75b4-4505-948b-15fc43fb5e57",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:03:00.266541+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f2b6666d-0269-4fa7-b0c3-02608cd8533d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7fc6835c-8cfc-4783-90a3-17502ced072f",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:01:54.839011+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "96.16.194.121"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "401c9443-9159-4853-908a-8497cd5d8065",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "df444760-7f65-4bee-b219-2bca4ba8bb6f",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:02:43.932498+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.212.251.196",
        "23.212.251.202",
        "23.212.251.216"
      ],
      "new_value": [
        "23.48.203.17",
        "23.48.203.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9436f259-fa76-4f5e-befb-7431c67b9149",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}