{
  "run_date": "2026-07-11",
  "events": [
    {
      "id": "f7975f73-f07a-480d-b1f3-81a4c4af2141",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-07-10T18:45:35.910755+00:00",
      "summary": "domain.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "c1a3c390-95db-464b-91be-bd992bec4a5e",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "06554106-c152-45fd-810f-458a2e11ba36",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-10T18:47:54.189447+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "new_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "124d4b58-78ba-49e9-8068-5da2d7680584",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "809d6ca7-11d7-4870-ade9-4e741d19c6c3",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-10T18:44:48.619487+00:00",
      "summary": "beyondblue.org.au: spf_present changed",
      "old_value": true,
      "new_value": false,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3b40c5ee-5ca4-42e4-b8ca-f25a9bd2345f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "24ac886f-1ae4-401d-8782-cbb3df2b751e",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-10T18:45:00.572702+00:00",
      "summary": "abc.net.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-0036d701.gslb.pphosted.com",
        "10 mxb-0036d701.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5f1d9086-f84f-4909-a881-ea3c89c941ab",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c9cdeb3d-264d-41b3-a253-5164ed4b1535",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-10T18:47:24.904322+00:00",
      "summary": "target.com.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-004f2a01.gslb.pphosted.com",
        "10 mxb-004f2a01.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "392fc732-f48d-46e8-b227-6d3f2298aff9",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "3b18165d-ecb0-49a3-afef-f4cfc852d766",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-10T18:46:55.408456+00:00",
      "summary": "theaustralian.com.au: mx_records changed",
      "old_value": [
        "10 mxa-00596a01.gslb.pphosted.com",
        "10 mxb-00596a01.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3349717d-979e-4880-b569-05c96dff9a56",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a48df888-4aa8-410e-a391-53e2f589ccde",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-10T18:44:13.650526+00:00",
      "summary": "unsw.edu.au: mx_records changed",
      "old_value": [
        "10 mxa-004a3801.gslb.pphosted.com",
        "10 mxb-004a3801.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ecd23154-1432-4cd0-b7b9-e9459044a403",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dece9a4e-ed4f-4636-83be-226922072c17",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-10T18:46:55.716899+00:00",
      "summary": "theaustralian.com.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3349717d-979e-4880-b569-05c96dff9a56",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "79c00a49-9622-45c1-afd3-43868e796f93",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-10T18:44:15.179107+00:00",
      "summary": "unsw.edu.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ecd23154-1432-4cd0-b7b9-e9459044a403",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "89bb8448-2671-4b15-8cf7-7ecdb0f7450a",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:44:59.926283+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.200.174.89"
      ],
      "new_value": [
        "23.222.196.140"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5f1d9086-f84f-4909-a881-ea3c89c941ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e85e25b6-9769-4a55-83f0-4df040367373",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:43:14.317374+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.8.67.222"
      ],
      "new_value": [
        "23.222.206.184"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7594d0ef-dd9d-46fa-9e22-5bf7b9602979",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9ddc70e8-2264-44dd-b958-f1fb23807fed",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:07.011104+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "55aa9b27-72e6-40d1-90e0-848155b63101",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "249e4f95-7250-40a5-81e8-c492f49d8b5c",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:22.163565+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "96.16.194.121"
      ],
      "new_value": [
        "184.29.31.193"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "513354c7-5bef-46e6-af58-07f76cab6b81",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "02f58932-1dfc-4c6a-ad2b-7f8d73b5a78a",
      "domain": "blackheartsandsparrows.com.au",
      "domain_id": "32c6ab29-10e6-416e-bb9c-c9c4e38e4f92",
      "cohort": "platform-hosted",
      "cohort_label": "Platform Hosted",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:43:38.736876+00:00",
      "summary": "blackheartsandsparrows.com.au: aaaa_records changed",
      "old_value": [
        "2606:4700:130:436c:6f75:6466:6c61:7265"
      ],
      "new_value": [
        "2606:4700:3036::6815:5f26",
        "2606:4700:3037::ac43:8ec3"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "204c0f0d-81d3-4fad-bbac-adc35217f554",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "98d20bfc-21e2-41ad-ac05-85cce6e74d40",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:45:23.538485+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1400:2:88:1b80:93a1",
        "2600:9000:2348:3200:2:88:1b80:93a1",
        "2600:9000:2348:4600:2:88:1b80:93a1",
        "2600:9000:2348:6e00:2:88:1b80:93a1",
        "2600:9000:2348:7000:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:a600:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2600:2:88:1b80:93a1",
        "2600:9000:2348:4400:2:88:1b80:93a1",
        "2600:9000:2348:5000:2:88:1b80:93a1",
        "2600:9000:2348:8000:2:88:1b80:93a1",
        "2600:9000:2348:a00:2:88:1b80:93a1",
        "2600:9000:2348:b800:2:88:1b80:93a1",
        "2600:9000:2348:c200:2:88:1b80:93a1",
        "2600:9000:2348:ec00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1cea5841-b13e-4a78-8b52-267076fdd220",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e15758e2-284d-46e0-a5ec-b4ef2143f08c",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-09T19:04:50.480205+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "43bd5853-0ac6-4f71-83ca-6907ac527dde",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d695b40f-c9b7-4d6e-bd13-b82e23ea74b5",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:48:12.099265+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "new_value": [
        "108.138.128.13",
        "108.138.128.31",
        "108.138.128.47",
        "108.138.128.52"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "30a324da-5120-4565-9181-d9ededdf86c3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e15c9cb8-c1c3-490e-8d05-a5a39f9322bd",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:12.884754+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.49.250.179",
        "23.49.250.199"
      ],
      "new_value": [
        "23.223.240.77",
        "23.223.240.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a457b9cb-063e-4e14-afa2-4597dfb02488",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3699d0d8-0526-44a1-a7ba-25db2037ad09",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:46:13.199270+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:c::1730:cb86",
        "2600:1408:ec00:c::1730:cb91"
      ],
      "new_value": [
        "2600:1405:7400:27::17d3:7cc7",
        "2600:1405:7400:27::17d3:7cca"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a457b9cb-063e-4e14-afa2-4597dfb02488",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bee9401c-d4c3-42fc-9382-2b84c64b4c3c",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:42:44.944729+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.45.46.205",
        "23.45.46.206"
      ],
      "new_value": [
        "184.29.57.31",
        "184.29.57.50"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "26b91f0c-75f1-4736-bc1d-0543d193a288",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "378a2364-433a-4cfe-8ca9-a044f6e0c2c2",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:42:45.235050+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:140a:5000:13::17de:11c8",
        "2600:140a:5000:13::17de:11ca"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a16",
        "2600:1406:bc00:26::1723:1a1f"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "26b91f0c-75f1-4736-bc1d-0543d193a288",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "636867c0-5039-4a0a-aa39-3625ea282609",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:42:52.616141+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.200.156.69",
        "23.200.156.78"
      ],
      "new_value": [
        "23.15.241.49",
        "23.15.241.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3cbd65ff-4c95-4507-9dee-5f0d5569ccaf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0e25f93d-265b-4b48-a7f0-19936568eba3",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:47:54.509561+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "104.95.237.90"
      ],
      "new_value": [
        "184.29.110.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "124d4b58-78ba-49e9-8068-5da2d7680584",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8942b7a0-e67e-4140-b084-58c6c239d645",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:47:54.872653+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:a80::ebe",
        "2600:1408:ec00:a82::ebe",
        "2600:1408:ec00:a84::ebe",
        "2600:1408:ec00:a88::ebe",
        "2600:1408:ec00:a8d::ebe"
      ],
      "new_value": [
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b89::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8c::ebe",
        "2600:1405:7400:b8f::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "124d4b58-78ba-49e9-8068-5da2d7680584",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "51c22767-570d-405d-858d-8af98d447362",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:44:33.284434+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.207.130.176"
      ],
      "new_value": [
        "23.60.141.94"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ca38e9ae-ab3c-4731-b845-0cbb09d6389c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "04910954-c738-4bfd-81a9-9b0b6dcb49cb",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:43:40.960370+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "new_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "419c6d38-0f00-4302-bf6a-032ff8ef3753",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d71a8aa3-c0c3-45a8-ae39-faab88fcc81b",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:45:40.244641+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.62.8.36",
        "23.62.8.41",
        "23.62.8.42",
        "23.62.8.44",
        "23.62.8.53",
        "23.62.8.57",
        "23.62.8.58",
        "23.62.8.59",
        "23.62.8.60"
      ],
      "new_value": [
        "23.1.240.225",
        "23.1.240.64",
        "23.1.240.80",
        "23.1.240.81",
        "23.55.242.122",
        "23.55.242.130",
        "23.55.242.138",
        "23.55.242.152",
        "23.55.242.161"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c8455056-7171-4288-b1ff-eb071cd22a82",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a917b3a9-fdd0-47fd-87bb-5d0c5f32b941",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:43:18.177882+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "new_value": [
        "18.238.96.120",
        "18.238.96.122",
        "18.238.96.13",
        "18.238.96.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "620c1693-49fb-40ed-ae42-8f0011cd9204",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "87e7035c-0581-4067-83af-32be44386b15",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:43:31.269900+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "184.25.59.136",
        "184.25.59.150"
      ],
      "new_value": [
        "23.209.84.149",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "45cdb8bc-c181-47dc-b43f-f7c6d241f68b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2d480f0c-32b3-4117-b9b5-8a36edbc97b5",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:43:31.528125+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1407:3c00:1874::17d2:f4c5",
        "2600:1407:3c00:1874::17d2:f4d8"
      ],
      "new_value": [
        "2600:1405:8400:6::17d1:54c5",
        "2600:1405:8400:6::17d1:54d7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "45cdb8bc-c181-47dc-b43f-f7c6d241f68b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c69603ec-1c4b-412e-9008-62f7d352ff50",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:43:26.037508+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:bc00:26::1723:1a17",
        "2600:1406:bc00:26::1723:1a28"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a0d",
        "2600:1406:bc00:26::1723:1a15"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "119070d4-dbba-4a56-9017-7487351b2575",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d0917285-4eb3-49b7-ac30-cd986abed104",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:47:26.418284+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "new_value": [
        "52.222.205.112",
        "52.222.205.119",
        "52.222.205.58",
        "52.222.205.81"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "924e335e-9db2-4a3b-a742-48d4491dd541",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "12044d42-5595-4fd9-9abc-19bae509c0c5",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:47:24.260844+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.205.110.137",
        "23.205.110.143"
      ],
      "new_value": [
        "23.12.145.134",
        "23.12.145.145"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "392fc732-f48d-46e8-b227-6d3f2298aff9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3a16fd54-7302-4d67-bfba-4e3fb68401c0",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:54.223863+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "104.95.237.90"
      ],
      "new_value": [
        "184.29.110.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3349717d-979e-4880-b569-05c96dff9a56",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "28c9b445-2e41-4465-88d7-0934ee64a421",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-10T18:46:55.080419+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:283::ebe",
        "2600:1408:ec00:28c::ebe",
        "2600:1408:ec00:28e::ebe",
        "2600:1408:ec00:293::ebe",
        "2600:1408:ec00:29d::ebe"
      ],
      "new_value": [
        "2600:1405:7400:b80::ebe",
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b89::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8f::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3349717d-979e-4880-b569-05c96dff9a56",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c8d6e76a-0f4b-414d-8fcb-be2f1579085b",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:35.347596+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "new_value": [
        "18.161.170.13",
        "18.161.170.21",
        "18.161.170.30",
        "18.161.170.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4dbbf323-41d6-41e8-b6f3-bc0c7ed992ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c245f152-4dae-443a-a323-852c060db4f6",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:45:23.217099+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "96.16.194.121"
      ],
      "new_value": [
        "23.221.241.206"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "daea7c52-6bc5-406e-9434-e6339b12281b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "47de7602-f195-4a69-a061-753d2966b61c",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-10T18:46:35.555481+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.48.203.17",
        "23.48.203.9"
      ],
      "new_value": [
        "23.45.46.197",
        "23.45.46.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "70f9952b-b9e0-4d43-8efc-e47a53f48c2f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}