{
  "run_date": "2026-08-18",
  "events": [
    {
      "id": "f3be67a2-35cd-4ded-8422-4f129210ac95",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-17T17:45:35.876682+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "cd517f81-08d4-4778-b4d1-71a8e16f5d9f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a665ce48-8786-468a-9302-a1416aaeb396",
      "domain": "worldvision.com.au",
      "domain_id": "77f2ac17-f9e5-4331-ae19-107c46b76450",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-08-17T17:45:56.875987+00:00",
      "summary": "worldvision.com.au: rdap_status changed",
      "old_value": [
        "active"
      ],
      "new_value": [
        "renew period",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "79381240-a6fb-4086-a563-e177112cebb0",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "41fd81d8-e2fc-409d-8110-0b57cf230a60",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-17T17:44:21.556082+00:00",
      "summary": "domain.com.au: mx_records changed",
      "old_value": [
        "1 aspmx.l.google.com",
        "10 alt3.aspmx.l.google.com",
        "10 alt4.aspmx.l.google.com",
        "5 alt1.aspmx.l.google.com",
        "5 alt2.aspmx.l.google.com"
      ],
      "new_value": [
        "0 domain-com-au.mail.protection.outlook.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a0031b7d-6a83-43ff-bc56-70357c4a7e98",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "50a54aad-636d-4dad-85e1-05bce21bdaea",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-08-17T17:44:21.835956+00:00",
      "summary": "domain.com.au: email_provider changed",
      "old_value": "Google Workspace",
      "new_value": "Microsoft 365",
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a0031b7d-6a83-43ff-bc56-70357c4a7e98",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "86b64462-83e1-4568-99e3-ee145aa0e45f",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:43:48.418268+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.62.176.97"
      ],
      "new_value": [
        "23.45.136.113"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13728e07-6f53-4522-953f-8a26743321c3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d3c50618-94e7-4247-a5e0-85ef57ac8759",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:41:43.842498+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.37.18.130"
      ],
      "new_value": [
        "184.31.113.236"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cdf9746e-2bfc-4d38-82ae-122aa117e624",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c9596d93-856a-4976-a61d-40212b771229",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:44:39.415657+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4605f7b3-10fa-4dc5-a0cd-b5e554da88cb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4780d212-6637-467e-b8b7-a8c5e7660761",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:45:13.614125+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.61.209.163"
      ],
      "new_value": [
        "184.31.113.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7ae0ea06-62be-4901-9394-907eaea94f8c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "18e8cc35-03e9-470b-aa63-5681ba2359dc",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:43:56.837528+00:00",
      "summary": "care.org.au: a_records changed",
      "old_value": [
        "3.167.99.21",
        "3.167.99.29",
        "3.167.99.49",
        "3.167.99.73"
      ],
      "new_value": [
        "18.67.39.35",
        "18.67.39.43",
        "18.67.39.68",
        "18.67.39.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a33f6a0-eb80-47ad-bfbb-d0c6f4a8db93",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3555f79b-f12a-48c7-ae97-ea08cd2893c4",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:43:57.210463+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:27ce:2e00:2:88:1b80:93a1",
        "2600:9000:27ce:6800:2:88:1b80:93a1",
        "2600:9000:27ce:6e00:2:88:1b80:93a1",
        "2600:9000:27ce:7a00:2:88:1b80:93a1",
        "2600:9000:27ce:b800:2:88:1b80:93a1",
        "2600:9000:27ce:c000:2:88:1b80:93a1",
        "2600:9000:27ce:d000:2:88:1b80:93a1",
        "2600:9000:27ce:f000:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2000:2:88:1b80:93a1",
        "2600:9000:2348:8800:2:88:1b80:93a1",
        "2600:9000:2348:8a00:2:88:1b80:93a1",
        "2600:9000:2348:a600:2:88:1b80:93a1",
        "2600:9000:2348:b800:2:88:1b80:93a1",
        "2600:9000:2348:c400:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a33f6a0-eb80-47ad-bfbb-d0c6f4a8db93",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "54e01622-c3fa-4974-acc5-d9898b4051e2",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-16T17:37:11.502666+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e3df29d5-805b-4605-9bad-936362a1f4af",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cefd0046-92ae-44e4-a4f9-5c3ed8217db2",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:46:30.502755+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "087bf9c6-1b39-44e5-bc4c-40c908e1eb70",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2db3dcd6-69cc-4d0d-ba22-c0c4b0ce6f9f",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:44:21.274904+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a0031b7d-6a83-43ff-bc56-70357c4a7e98",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "85a23980-78e9-481d-ae89-31b7629b8c86",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:45:04.002235+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.34.62.165",
        "23.34.62.171"
      ],
      "new_value": [
        "23.215.11.241",
        "23.215.11.243"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ec33fce9-8d5d-4955-a7ab-7ac8bc7aa567",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "49b0d777-2adc-4d7a-8417-9a6c4296f292",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:45:04.305419+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "new_value": [
        "2600:1418:a000:15::1726:6db0",
        "2600:1418:a000:15::1726:6db1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ec33fce9-8d5d-4955-a7ab-7ac8bc7aa567",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "eb7bc9a8-dd17-461f-8412-d05b15c803b3",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:41:13.875908+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.62.46.171",
        "23.62.46.184"
      ],
      "new_value": [
        "23.33.29.132",
        "23.33.29.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b3049a84-5209-4e02-bf7e-8fa28c540e33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "17b9997b-5805-4ee1-a356-4786bc77483b",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:41:14.173708+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:3a00:33::170b:cfe4",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "new_value": [
        "2600:1405:7400:12::17de:1bad",
        "2600:1405:7400:12::17de:1bb7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b3049a84-5209-4e02-bf7e-8fa28c540e33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "559d3241-d5f3-4ac9-b75c-4e72b564dc80",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:41:21.476325+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "69.192.139.68",
        "69.192.139.73"
      ],
      "new_value": [
        "23.193.200.147",
        "23.193.200.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "906748de-633f-44b6-8860-5482bbc95eb8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dd8d2b7a-6a50-4b98-8abd-7d35fb9d2d42",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:46:39.282551+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "104.119.184.137"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1419efe2-c576-401e-8f46-fa3f284b1063",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8421b057-359d-4508-9dba-6a3f47f5f464",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:46:39.558193+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:181::ebe",
        "2600:1406:35:183::ebe",
        "2600:1406:35:18a::ebe",
        "2600:1406:35:18b::ebe",
        "2600:1406:35:190::ebe"
      ],
      "new_value": [
        "2600:1418:a000:58b::ebe",
        "2600:1418:a000:58d::ebe",
        "2600:1418:a000:596::ebe",
        "2600:1418:a000:59e::ebe",
        "2600:1418:a000:5a5::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1419efe2-c576-401e-8f46-fa3f284b1063",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "465001a5-0e1b-4739-b0fe-d373ab71662b",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:43:00.677380+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.61.99.153"
      ],
      "new_value": [
        "23.49.178.193"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2996b36c-a209-4d13-aab4-88c4c0cc94f0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cabec861-1640-4e4a-a345-e923ed390bbe",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:42:19.224952+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "143.204.1.104",
        "143.204.1.30",
        "143.204.1.34",
        "143.204.1.67"
      ],
      "new_value": [
        "3.167.212.102",
        "3.167.212.122",
        "3.167.212.58",
        "3.167.212.70"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3e490b0d-7943-41ae-ba2c-20e372612e7e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9f15b56e-94ef-4ab0-aa3b-185fdd6ef631",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:41:49.905305+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.155.192.106",
        "18.155.192.118",
        "18.155.192.129",
        "18.155.192.54"
      ],
      "new_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2be5258d-cd3b-4b4c-b431-965a8cad356d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d87e4a19-7134-4c25-aa2c-b711c94e672b",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:42:06.583444+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.62.46.15",
        "23.62.46.7"
      ],
      "new_value": [
        "23.47.72.11",
        "23.47.72.6"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fdc68666-2e7a-4479-929a-0a6cf1038db0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e1883d8e-3c7e-48bf-b5e0-ae40e9b0e0a4",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:42:06.847223+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:49::172e:d8cb",
        "2600:1406:2e00:49::172e:d8cc"
      ],
      "new_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8ac"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fdc68666-2e7a-4479-929a-0a6cf1038db0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "39999269-ceec-4b3e-8dde-cda79f5c0d5e",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:42:04.313359+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "173.222.162.138",
        "173.222.162.152"
      ],
      "new_value": [
        "23.221.220.25",
        "23.221.220.36"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bcf46db1-a16e-4a5c-9541-9831ee5b5b71",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f00693d9-262d-469c-a32d-cce9099113fe",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:42:04.636744+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1404:6400:14::17c6:724",
        "2600:1404:6400:14::17c6:737"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bcf46db1-a16e-4a5c-9541-9831ee5b5b71",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "86b4b4ec-cd3c-45e8-be11-1f4ec27bc6cc",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:46:12.061137+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.173.107",
        "18.155.173.34",
        "18.155.173.39",
        "18.155.173.70"
      ],
      "new_value": [
        "3.170.185.119",
        "3.170.185.127",
        "3.170.185.46",
        "3.170.185.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5c8832e3-d22d-4998-8e74-e40e7c656cc5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b340a275-7d89-4bdd-b2ed-12029b550b5d",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:45:48.331100+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.53.35.172",
        "23.53.35.175"
      ],
      "new_value": [
        "23.59.88.229",
        "23.59.88.241"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e9029ba5-ad54-4ee3-a1f9-bc65c7c9dc57",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ebcc3ae7-4974-40cb-a7f5-869703ad6213",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:45:39.991368+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "184.31.112.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "261f84a1-59f8-413a-914a-a13e35a6a758",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "16fabb96-cb7d-4b33-8285-c69b146dbf0f",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-17T17:45:40.253986+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:181::ebe",
        "2600:1406:35:186::ebe",
        "2600:1406:35:18b::ebe",
        "2600:1406:35:190::ebe",
        "2600:1406:35:191::ebe"
      ],
      "new_value": [
        "2600:1418:a000:582::ebe",
        "2600:1418:a000:58c::ebe",
        "2600:1418:a000:58f::ebe",
        "2600:1418:a000:594::ebe",
        "2600:1418:a000:5a0::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "261f84a1-59f8-413a-914a-a13e35a6a758",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "433f46c6-a4a5-4c49-812c-33c4447a48ba",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:45:27.298035+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.238.109.43",
        "18.238.109.76",
        "18.238.109.8",
        "18.238.109.83"
      ],
      "new_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa5e2d20-8bf0-42f5-ae4e-6b369ad5b39f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "71948313-11ce-49f8-9987-52fb2c901bf0",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:44:10.625345+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.222.205.182"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7209bb08-1312-4d29-82d7-d5d92ebe1319",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9002bcb6-6a82-4546-8a6a-b96b99658180",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-17T17:44:53.198550+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.200.156.74",
        "23.200.156.88"
      ],
      "new_value": [
        "23.211.136.71",
        "23.211.136.76"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9a758058-5a67-43b8-8ce7-2b9b3ff859c4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}