{
  "run_date": "2026-08-05",
  "events": [
    {
      "id": "3ce96d17-fc01-4347-836d-856c08336c49",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-04T18:52:52.314478+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "da5e37ee-c771-423f-9f73-71c4f6392165",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "949d74c0-057a-41dd-9b78-922535b96ed2",
      "domain": "deakin.edu.au",
      "domain_id": "a6738191-8536-49a1-97dd-fce674e12c13",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-08-04T18:53:48.237204+00:00",
      "summary": "deakin.edu.au: spf_present changed",
      "old_value": false,
      "new_value": true,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7545559d-e644-4aff-b523-ac2f6cbe1402",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "61f2db5a-89da-4eab-a155-36ff61724cb4",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-04T18:53:25.872638+00:00",
      "summary": "reece.com.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-0078f801.gslb.pphosted.com",
        "10 mxb-0078f801.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2844bb49-5b25-48f2-88ba-243dd042a800",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "40fea354-9d57-47d9-a085-8dcadb760ee2",
      "domain": "slatergordon.com.au",
      "domain_id": "64342818-8467-45d4-a2dd-b65341e3c0b0",
      "cohort": "legal-watchlist",
      "cohort_label": "Legal Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-04T18:48:37.651677+00:00",
      "summary": "slatergordon.com.au: mx_records changed",
      "old_value": [
        "10 mxa-003b4701.gslb.pphosted.com",
        "10 mxb-003b4701.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8d854347-baac-47cf-8cf2-af0703ec1262",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "92884266-a9f4-401b-a3c9-9d3ca0a429ce",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-04T18:52:57.848246+00:00",
      "summary": "target.com.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-004f2a01.gslb.pphosted.com",
        "10 mxb-004f2a01.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f635f543-ef7f-485f-87ed-8547ed3aa202",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "e8a0514a-f384-4676-9d42-9b6215b91723",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-04T18:49:45.158317+00:00",
      "summary": "unsw.edu.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 mxa-004a3801.gslb.pphosted.com",
        "10 mxb-004a3801.gslb.pphosted.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e887a9f0-9a83-4137-8af2-44df0a0fdd4a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "5f00c13c-a60a-4535-8000-026a0bbbf0c9",
      "domain": "slatergordon.com.au",
      "domain_id": "64342818-8467-45d4-a2dd-b65341e3c0b0",
      "cohort": "legal-watchlist",
      "cohort_label": "Legal Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-08-04T18:48:37.919163+00:00",
      "summary": "slatergordon.com.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8d854347-baac-47cf-8cf2-af0703ec1262",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "42ec0e73-200f-4141-b7fc-e7999bc6430c",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:51:02.240268+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.37.16.130"
      ],
      "new_value": [
        "23.199.0.129"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "061ee694-b602-49e5-9c61-87eef47dda89",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c5dad20d-f5db-4f46-a8c1-b020aacc3b9e",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:48:41.632503+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.37.18.130"
      ],
      "new_value": [
        "23.35.29.215"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "97a3ec02-61a8-42b9-b2fb-31266f8af1d3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7b288012-965d-4218-b4e0-56271d5e365a",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:52:32.569471+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.222.205.182"
      ],
      "new_value": [
        "184.29.111.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1eb779cd-f627-4913-b5c4-7ec9f2d7cfb9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "03c83712-5538-4a2d-93ce-a95a8c505a22",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:50:54.537765+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1800:2:88:1b80:93a1",
        "2600:9000:2348:2000:2:88:1b80:93a1",
        "2600:9000:2348:400:2:88:1b80:93a1",
        "2600:9000:2348:8e00:2:88:1b80:93a1",
        "2600:9000:2348:a200:2:88:1b80:93a1",
        "2600:9000:2348:a600:2:88:1b80:93a1",
        "2600:9000:2348:a800:2:88:1b80:93a1",
        "2600:9000:2348:f200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2c00:2:88:1b80:93a1",
        "2600:9000:2348:5200:2:88:1b80:93a1",
        "2600:9000:2348:8000:2:88:1b80:93a1",
        "2600:9000:2348:a00:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:b400:2:88:1b80:93a1",
        "2600:9000:2348:de00:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a4dd5a88-4830-4f26-bd93-c2ecf8022595",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "abfccccc-8b83-49a7-9bfb-e8f78e5a3b38",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-03T19:03:05.497057+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.169.183.116",
        "3.169.183.17",
        "3.169.183.43",
        "3.169.183.56"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2c618e89-b0a6-4992-968e-8235d1ac6bb3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d3f4c33b-ae16-4eeb-8983-74663f2dddb4",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:53:38.889702+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "3.169.183.116",
        "3.169.183.17",
        "3.169.183.43",
        "3.169.183.56"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "646466ba-f63f-41a7-bb51-e4a58a7a6ba0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9d0de6fb-ffba-4c2c-a823-2dd4a07d8aa0",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:50:38.329161+00:00",
      "summary": "crikey.com.au: a_records changed",
      "old_value": [
        "192.0.66.227"
      ],
      "new_value": [
        "192.0.66.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dec4b56b-51f2-40bd-b5ff-068e3ec62637",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5ead171d-e299-4f43-bfeb-be7c0a290602",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:51:38.829736+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "new_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ad7e96bf-eb91-4bd6-a136-512677b7d697",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7ac47382-5463-4cbe-82af-da20b1f9c21f",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:52:24.509816+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.66.3.16",
        "23.66.3.8"
      ],
      "new_value": [
        "23.223.241.141",
        "23.223.241.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "004eed7a-03bd-433f-a1cd-a3deb55ca70c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f9459ead-2807-42a9-88e1-4239a8535998",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:52:24.838090+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "new_value": [
        "2600:1407:7400:14::17d7:bf1",
        "2600:1407:7400:14::17d7:bf3"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "004eed7a-03bd-433f-a1cd-a3deb55ca70c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "93f2bad5-4a17-4365-bc9f-66b5af5df20c",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:48:13.448068+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.62.46.171",
        "23.62.46.184"
      ],
      "new_value": [
        "23.196.3.145",
        "23.196.3.149"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9478f9ea-ded0-46c4-92e8-ff327734e493",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9e801d73-0d56-4fa9-b919-7741e3c8b9da",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:48:13.718336+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:1000:9::17d6:16e8",
        "2600:1405:1000:9::17d6:16ea"
      ],
      "new_value": [
        "2600:1408:c400:42::1749:cfa8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9478f9ea-ded0-46c4-92e8-ff327734e493",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3cd7df1a-567e-4d10-bd56-3caa02bab20d",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:48:20.595039+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.46.216.197",
        "23.46.216.208"
      ],
      "new_value": [
        "23.48.203.145",
        "23.48.203.146"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d3de0fef-2f08-4064-b520-f745997b78d2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5ddb6a24-8b59-480a-a208-6a228a53bd8a",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:53:52.258335+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "184.29.110.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4f2ef60b-60c5-4311-8e0a-cc92194ffd99",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e0730c18-6255-4453-9331-892cec5cb77b",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:53:52.603499+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:284::ebe",
        "2600:1405:8400:290::ebe",
        "2600:1405:8400:294::ebe",
        "2600:1405:8400:296::ebe",
        "2600:1405:8400:297::ebe"
      ],
      "new_value": [
        "2600:1407:3c00:1482::ebe",
        "2600:1407:3c00:1485::ebe",
        "2600:1407:3c00:148e::ebe",
        "2600:1407:3c00:1492::ebe",
        "2600:1407:3c00:1493::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4f2ef60b-60c5-4311-8e0a-cc92194ffd99",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2efe060a-8257-425d-85f2-1d2b3e1b7355",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:49:17.088765+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "108.156.224.118",
        "108.156.224.122",
        "108.156.224.52",
        "108.156.224.9"
      ],
      "new_value": [
        "143.204.1.104",
        "143.204.1.30",
        "143.204.1.34",
        "143.204.1.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f3dfcd0c-5da9-4709-ae8b-0d86d7164eed",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "adffb30b-4cfa-451b-8a5a-d071b815f697",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:51:43.218438+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.219.64.16",
        "23.219.64.24",
        "23.219.64.34",
        "23.219.64.35",
        "23.219.64.59",
        "23.219.64.82"
      ],
      "new_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a7539f66-1ebe-437a-85cf-2592f2d42731",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "511e2e6d-c441-4443-93b8-df9ea6daf263",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:48:46.407848+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.155.192.106",
        "18.155.192.118",
        "18.155.192.129",
        "18.155.192.54"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae04efce-f018-4ee6-9534-7e8e256315da",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1c8c14ac-6ac8-45c8-bba6-d74995a1e264",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:49:04.355698+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "69.192.139.197",
        "69.192.139.238"
      ],
      "new_value": [
        "23.202.230.199",
        "23.202.230.222"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ad1c58d1-b898-4628-b5aa-a126e7563395",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3a7ff9aa-a1fd-46c5-80fe-896cccad3388",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:49:04.586400+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:49::172e:d8cb",
        "2600:1406:2e00:49::172e:d8cc"
      ],
      "new_value": [
        "2600:1408:5400:d::170c:9386",
        "2600:1408:5400:d::170c:939e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ad1c58d1-b898-4628-b5aa-a126e7563395",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3b7ad308-11f5-46bc-832e-d9ba603535e4",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:49:03.548333+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a0d",
        "2600:1406:bc00:26::1723:1a15"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "912df070-c280-4109-a220-b25e1460e60d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "353eca94-40ab-4178-9b0a-d34a4560200c",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:53:25.580813+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.173.107",
        "18.155.173.34",
        "18.155.173.39",
        "18.155.173.70"
      ],
      "new_value": [
        "3.170.185.119",
        "3.170.185.127",
        "3.170.185.46",
        "3.170.185.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2844bb49-5b25-48f2-88ba-243dd042a800",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "863f833d-60fb-4f46-826b-2e510cec1807",
      "domain": "rspca.org.au",
      "domain_id": "5daea98a-9488-4953-ab17-dde64c75686a",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:51:04.875578+00:00",
      "summary": "rspca.org.au: aaaa_records changed",
      "old_value": [
        "2606:4700:3031::ac43:d9db",
        "2606:4700:3034::6815:4e47"
      ],
      "new_value": [
        "2606:4700:3031::6815:4e47",
        "2606:4700:3031::ac43:d9db"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b2f92afa-fbe1-4910-825e-b05a7d7f064c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a6b05164-2713-4130-849f-d27263993be9",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:52:57.575348+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "new_value": [
        "23.62.46.10",
        "23.62.46.22"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f635f543-ef7f-485f-87ed-8547ed3aa202",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e2c79be5-c6de-47b6-9ee5-4b72ae407c93",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:52:56.621787+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "184.29.110.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "92a6e5fa-37cc-4865-a98e-9a81bd605c2c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "adc7bb9c-fb51-48fb-9a69-f9004f5dc3cd",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-04T18:52:56.948912+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:280::ebe",
        "2600:1405:8400:282::ebe",
        "2600:1405:8400:284::ebe",
        "2600:1405:8400:28d::ebe",
        "2600:1405:8400:295::ebe"
      ],
      "new_value": [
        "2600:1407:3c00:1482::ebe",
        "2600:1407:3c00:1486::ebe",
        "2600:1407:3c00:1487::ebe",
        "2600:1407:3c00:1491::ebe",
        "2600:1407:3c00:1493::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "92a6e5fa-37cc-4865-a98e-9a81bd605c2c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a57f97ef-e46b-46f0-829f-66b313dabb6a",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:52:45.034254+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.20.119",
        "65.8.20.123",
        "65.8.20.125",
        "65.8.20.66"
      ],
      "new_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "298176d6-257e-47db-b2fc-c37a36fdd070",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "08fc5ea6-71db-41a7-93f4-5d9fd763d946",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:51:24.050482+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "23.222.205.182"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fa16bcf6-d67a-483e-917a-5e8674b820f3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2c11b497-fd0f-4f10-b248-6f1425238632",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-04T18:51:51.676796+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "173.222.162.142",
        "173.222.162.188"
      ],
      "new_value": [
        "23.209.84.166",
        "23.209.84.176"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4119f7aa-3435-413b-b511-f65d71f95819",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}