{
  "run_date": "2026-07-24",
  "events": [
    {
      "id": "de4a1b8b-a45e-4719-bc42-59c3c81f5522",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-23T18:26:58.405129+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "865808b7-5099-4f09-a544-0a9dc7c4b4b7",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "67a45a1f-27ff-4fae-ad1e-e944ed72e08a",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-07-23T18:25:56.406619+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a95d65ed-bd34-4a3f-b3db-ec78a5718193",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "8b97bf2f-a8da-4b5e-9636-c4490c675d2c",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-23T18:25:43.743407+00:00",
      "summary": "medibank.com.au: mx_records changed",
      "old_value": [
        "10 mxa-0021ed01.gslb.pphosted.com",
        "10 mxb-0021ed01.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3762c7f6-5687-499d-925f-185f3130b711",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "1183f13c-b06a-4aa8-80ed-bd3f20a40500",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-23T18:23:29.700663+00:00",
      "summary": "unsw.edu.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-004a3801.gslb.pphosted.com",
        "10 mxb-004a3801.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "61f02ae2-34f5-4fdf-9949-60a4f509ab87",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ead626cf-6b3d-4031-a8b2-3f2488ad7a30",
      "domain": "vic.gov.au",
      "domain_id": "c796fd35-2db0-436f-bd91-217b6f2e55f8",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-23T18:21:42.902733+00:00",
      "summary": "vic.gov.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-001fc401.gslb.pphosted.com",
        "10 mxb-001fc401.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8e34a5ab-494c-4e8d-baaa-07e44ed314d4",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "2a6f6fe3-5b28-4703-898c-6373fecf0a37",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-23T18:25:43.957463+00:00",
      "summary": "medibank.com.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3762c7f6-5687-499d-925f-185f3130b711",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "20a8c909-631e-4a80-9591-36f08a2ec7b7",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:24:17.879770+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.38.168.128"
      ],
      "new_value": [
        "23.40.24.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8b8e7730-71bc-4288-8c0e-65358f3875cd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "156d0a73-dd0c-4fff-a248-7ad623173927",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:32.133117+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.218.127.201"
      ],
      "new_value": [
        "23.222.202.160"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cae16a4c-7653-41bb-bfad-ba0b5a88a054",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fbbe8847-8c91-4910-9dce-1c8e23ad38e2",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:25:18.652420+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3db096fe-5530-4c3d-be16-463f72097705",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f28ffaae-cb29-41d9-b027-cfd68003a815",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:25:31.225752+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "2.18.101.195"
      ],
      "new_value": [
        "23.222.201.159"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c20ad976-c3d1-4537-9231-f68c96cbe48f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fb81780e-110b-4919-8d02-a94e00ac8b86",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:24:34.332994+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2200:2:88:1b80:93a1",
        "2600:9000:2348:3400:2:88:1b80:93a1",
        "2600:9000:2348:4c00:2:88:1b80:93a1",
        "2600:9000:2348:6400:2:88:1b80:93a1",
        "2600:9000:2348:a200:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1",
        "2600:9000:2348:e200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:4000:2:88:1b80:93a1",
        "2600:9000:2348:600:2:88:1b80:93a1",
        "2600:9000:2348:ac00:2:88:1b80:93a1",
        "2600:9000:2348:bc00:2:88:1b80:93a1",
        "2600:9000:2348:ce00:2:88:1b80:93a1",
        "2600:9000:2348:d400:2:88:1b80:93a1",
        "2600:9000:2348:da00:2:88:1b80:93a1",
        "2600:9000:2348:f000:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "52cd1a44-956a-498c-955f-77a5e388d849",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c4912c19-6a90-4efc-a6f9-d4f8325d324e",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:25:49.324125+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6727c6e0-0973-4468-af57-ddecea21367e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "148dc367-ea55-4115-a1e2-7a2b25cedc35",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:27:08.388303+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cc12ec54-9c34-4dd1-a644-f4866c973d28",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6ea8282e-5ce7-413c-aa7c-0e074475b2b3",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:23:56.401278+00:00",
      "summary": "crikey.com.au: aaaa_records changed",
      "old_value": [
        "2a04:fa87:fffd::c000:42e3"
      ],
      "new_value": [
        "2a04:fa87:fffd::c000:427f"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3752d71d-d1bb-44fc-8274-948b3f625b7c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f87b564f-3c50-4329-8bb1-3ea3ff673541",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:24:50.372540+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "52.222.205.11",
        "52.222.205.113",
        "52.222.205.80",
        "52.222.205.92"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "74f61c3a-7db2-4dab-9c4d-d2bfef8c19aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5ed99ba8-d249-4f27-80bd-e704caacb894",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:25:22.719212+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.216.145.69",
        "23.216.145.71"
      ],
      "new_value": [
        "23.206.121.196",
        "23.206.121.215"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "20cad654-b3b5-4d10-97af-1e4fb86b48f8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0b1b0c7f-4d26-4981-a9c2-fe6c0e205044",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:25:23.311639+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1c::17d8:9145",
        "2600:1409:9800:1c::17d8:9147"
      ],
      "new_value": [
        "2600:1408:ec00:2f::1735:b8a",
        "2600:1408:ec00:2f::1735:b92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "20cad654-b3b5-4d10-97af-1e4fb86b48f8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "72ff1103-69a7-4018-8a9d-339b9cc0d29a",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:00.172518+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "104.77.178.180",
        "104.77.178.183"
      ],
      "new_value": [
        "23.48.224.73",
        "23.48.224.81"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "17ba8254-0444-4e93-9161-357067a33218",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "497fc706-d288-4fac-b4ec-75b5112a9c70",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:22:00.935509+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:141b:1c00:36::17d2:5ca7",
        "2600:141b:1c00:36::17d2:5cb1"
      ],
      "new_value": [
        "2600:141b:1c00:23::1730:e049",
        "2600:141b:1c00:23::1730:e051"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "17ba8254-0444-4e93-9161-357067a33218",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1ad1874d-34e5-42ff-8d5e-d5dd6115fb76",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:10.315533+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.205.107.69",
        "23.205.107.78"
      ],
      "new_value": [
        "23.48.203.145",
        "23.48.203.146"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dd9933a4-2063-44dc-92cf-690d81a46e21",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "61bfc478-3fd1-4806-82e6-946b7ef6ad6a",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:26:58.992502+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "2.18.100.162"
      ],
      "new_value": [
        "23.35.28.164"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "865808b7-5099-4f09-a544-0a9dc7c4b4b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d202525c-5f1c-4843-9da3-008205533066",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:26:59.622918+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1682::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:1687::ebe",
        "2600:1409:9800:1688::ebe",
        "2600:1409:9800:168e::ebe"
      ],
      "new_value": [
        "2600:1408:c400:187::ebe",
        "2600:1408:c400:18a::ebe",
        "2600:1408:c400:18b::ebe",
        "2600:1408:c400:18d::ebe",
        "2600:1408:c400:192::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "865808b7-5099-4f09-a544-0a9dc7c4b4b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b39a228e-1b13-481b-b6ea-2751c9a9e04b",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:23:43.297784+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.207.130.176"
      ],
      "new_value": [
        "23.61.99.153"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4b3b4e3b-c148-4457-bb0e-f336b2d1bd22",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5db2c0db-4a27-4d9c-be10-dfa8b2165b97",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:23:00.479322+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ff4d5607-205a-4423-a973-e400e9c6c74f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e2033070-9796-4501-8a5a-9d428e18fb43",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:24:54.023494+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.55.242.122",
        "23.55.242.146",
        "23.55.242.147",
        "23.55.242.152"
      ],
      "new_value": [
        "23.1.240.164",
        "23.1.240.216",
        "23.1.240.225",
        "23.1.240.66",
        "23.1.240.81",
        "23.55.242.146",
        "23.55.242.147",
        "23.55.242.152",
        "23.55.242.161"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "68215287-b477-49e4-8328-860b8367ed0b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6d553827-ad71-40f7-afee-7f663a293d5a",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:37.020678+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "99.84.234.40",
        "99.84.234.6",
        "99.84.234.63",
        "99.84.234.98"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2a635c00-9b57-458b-97ca-04a60e56aeb1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e8589e22-b8a9-4448-be61-82e53c0c482b",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:53.354092+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.39.174.148",
        "23.48.203.168"
      ],
      "new_value": [
        "23.73.207.153"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "19364891-d804-4b22-b31d-9270519eb877",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "07833629-3788-41d1-9a2f-1e13afdaca74",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:22:53.581535+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:2f::17c3:258a",
        "2600:1408:5400:2f::17c3:2590"
      ],
      "new_value": [
        "2600:1408:c400:16::17d4:f80a",
        "2600:1408:c400:16::17d4:f818"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "19364891-d804-4b22-b31d-9270519eb877",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "23e99af8-bc5d-4ff3-bff2-06d62ad3e6c9",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:22:44.736336+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.216.149.140",
        "23.216.149.145"
      ],
      "new_value": [
        "23.222.17.76",
        "23.222.17.78"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1952d3a4-9f62-4d0a-a355-be6a9b1114aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b82b770d-ccf2-4220-b5c9-7e22a86d2b65",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:22:44.985274+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:bc00:26::1723:1a0d",
        "2600:1406:bc00:26::1723:1a15"
      ],
      "new_value": [
        "2600:140a:5000:12::17de:11e4",
        "2600:140a:5000:12::17de:11e6"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1952d3a4-9f62-4d0a-a355-be6a9b1114aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "917d46f8-6c57-4126-a91a-234dffff3cd7",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:26:30.826513+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fdb23cec-04d6-42bd-a8f9-ca48bf35b6aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2557f272-3cd8-402d-b376-9ebbb1fdece4",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:26:26.684799+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.213.34.73",
        "23.213.34.88"
      ],
      "new_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "00f0de95-767f-420c-9ec5-c8c91b372088",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7f33d0d4-eebd-47b6-a394-fda155b8ad51",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:26:00.908275+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "2.18.100.162"
      ],
      "new_value": [
        "23.219.4.109"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ee63abaa-4c58-424e-89db-313b516ae6e1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8932f57c-ffea-48e3-ac63-7236c451aaff",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-23T18:26:01.129196+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1681::ebe",
        "2600:1409:9800:1682::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:1687::ebe",
        "2600:1409:9800:168e::ebe"
      ],
      "new_value": [
        "2600:1408:5400:e86::ebe",
        "2600:1408:5400:e8d::ebe",
        "2600:1408:5400:e92::ebe",
        "2600:1408:5400:e95::ebe",
        "2600:1408:5400:e98::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ee63abaa-4c58-424e-89db-313b516ae6e1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4820e532-77ba-47b9-988f-eef24df2e517",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:25:48.569977+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "36d78056-7f11-4a6f-8fab-0f043b898eda",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "296463c1-ba37-4bf6-b3af-1b9f2efbfeda",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:24:39.089104+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "184.29.111.204"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5382cec0-fdab-421b-8c54-0ccb78a5eb64",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2e88c900-71fd-4912-a177-6a0d195ff224",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-23T18:25:32.733702+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.212.251.88",
        "23.212.251.89"
      ],
      "new_value": [
        "23.213.186.200",
        "23.213.186.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "40a50134-5085-4242-b003-4440e3f22c61",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}