{
  "run_date": "2026-08-23",
  "events": [
    {
      "id": "b4ad2600-1db8-4b99-8f2f-aeac4a086801",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-22T17:36:10.603009+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a425817a-5a1c-4869-82f4-6342ab826267",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "0f6864fa-a556-4f08-aa5c-9392a300445a",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-08-22T17:36:10.877386+00:00",
      "summary": "adelaide.edu.au: rdap_status changed",
      "old_value": [
        "active"
      ],
      "new_value": [
        "renew period",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a425817a-5a1c-4869-82f4-6342ab826267",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c7a85a7d-f1d9-4902-ae2a-83f8dd95d593",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-22T17:38:50.766196+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "new_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "ebcd123c-e700-4203-9a26-11c89a3fcde6",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c2bd6ea6-219c-48d3-983f-38561ad4e10f",
      "domain": "rmit.edu.au",
      "domain_id": "97953197-45ee-465d-bf4e-6f0b92451717",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-08-22T17:37:49.890515+00:00",
      "summary": "rmit.edu.au: rdap_status changed",
      "old_value": [
        "active"
      ],
      "new_value": [
        "renew period",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "05d08881-abcc-4e3e-9c72-30c0b9ffdec0",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "00969113-b0d8-4ec7-9978-ff6b92eac709",
      "domain": "uts.edu.au",
      "domain_id": "7baeeb4a-4974-4651-8e91-e67b575785ec",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-08-22T17:35:48.141666+00:00",
      "summary": "uts.edu.au: mx_records changed",
      "old_value": [
        "10 au-smtp-inbound-1.mimecast.com",
        "10 au-smtp-inbound-2.mimecast.com"
      ],
      "new_value": [
        "10 uts-edu-au.mail.protection.outlook.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "149e78a8-aadb-4bd5-b16e-53c73bd11154",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "66419a5b-c57b-4ad6-9066-18432a4aff28",
      "domain": "uts.edu.au",
      "domain_id": "7baeeb4a-4974-4651-8e91-e67b575785ec",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-08-22T17:35:48.982232+00:00",
      "summary": "uts.edu.au: email_provider changed",
      "old_value": "Mimecast",
      "new_value": "Microsoft 365",
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "149e78a8-aadb-4bd5-b16e-53c73bd11154",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "87316398-3a01-483d-ad18-0d624fc6bb9a",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:35:55.705206+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.60.174.138"
      ],
      "new_value": [
        "23.45.136.113"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7901a51d-8934-4895-a140-b647cfb23208",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5e164bc9-826b-445f-8217-a8d7d6fa5800",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:34:05.117302+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.61.3.235"
      ],
      "new_value": [
        "184.28.3.221"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5f5cac94-1439-4b14-bbb2-c6e2641d014a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ae80f6cb-db11-4198-b1b0-97d2d47657f9",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:36:48.764538+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1ade9ab4-d6f6-41d9-8e87-89e44bf447d7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2c898e49-4882-46fa-b589-2073fde9a41d",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:16.669895+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.222.205.182"
      ],
      "new_value": [
        "23.221.253.159"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b6ef6174-b4d0-4090-9f94-56775ce5f774",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0bbd8484-91d3-4780-bc07-cf23478b88b0",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:36:04.005350+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2c00:2:88:1b80:93a1",
        "2600:9000:2348:5200:2:88:1b80:93a1",
        "2600:9000:2348:7200:2:88:1b80:93a1",
        "2600:9000:2348:8a00:2:88:1b80:93a1",
        "2600:9000:2348:9c00:2:88:1b80:93a1",
        "2600:9000:2348:ac00:2:88:1b80:93a1",
        "2600:9000:2348:b000:2:88:1b80:93a1",
        "2600:9000:2348:fe00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2600:2:88:1b80:93a1",
        "2600:9000:2348:3400:2:88:1b80:93a1",
        "2600:9000:2348:4200:2:88:1b80:93a1",
        "2600:9000:2348:6e00:2:88:1b80:93a1",
        "2600:9000:2348:7e00:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:de00:2:88:1b80:93a1",
        "2600:9000:2348:e400:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "09a2b3a9-3760-4bc6-b2fc-3f16be922e18",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9290dd63-cac1-48b8-a443-40923ee8ef4d",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-21T17:46:55.417285+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "522b04d2-3b77-453b-aaea-10bbcc6012e0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6b853fe7-e94c-4e8b-8a93-ade710772234",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:38:52.224397+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "13.224.187.31",
        "13.224.187.41",
        "13.224.187.45",
        "13.224.187.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "26709147-e9a1-4ca9-b32e-23821ff3035f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "91065f65-ff10-482b-b1a7-07da5bd65a2d",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:36:26.587417+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1540fc83-8b52-4be1-b834-04c8d511a12b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "71fe40d6-af40-4fa7-beaa-ce3bf7724e93",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:05.532694+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.62.226.169",
        "23.62.226.174"
      ],
      "new_value": [
        "23.212.251.68",
        "23.212.251.69"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c2fc54c6-5c6a-4fd6-924e-21df4a3087f7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6900bc0b-16c4-4813-a7ba-fd3df6afa3e2",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:37:05.756854+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "new_value": [
        "2600:1408:c400:13::17d4:f8c7",
        "2600:1408:c400:13::17d4:f8cb"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c2fc54c6-5c6a-4fd6-924e-21df4a3087f7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b8c55f8e-5330-4b0b-81f7-c107a95aa7ae",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:33:32.883362+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.220.161.72",
        "23.220.161.84"
      ],
      "new_value": [
        "23.211.139.204",
        "23.211.139.207"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cef8afb3-bd50-4251-b9a5-b41a5458908e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6b0f7a14-56ba-4f41-bba9-949b6df5529f",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:33:33.262524+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:ec00:25::17dc:a313",
        "2600:1404:ec00:25::17dc:a315"
      ],
      "new_value": [
        "2600:1406:3a00:33::170b:cfe4",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cef8afb3-bd50-4251-b9a5-b41a5458908e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "01e8a6fa-a89e-41cc-bc4f-07295f5e7081",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:25.177813+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "13.236.126.151",
        "32.236.216.68"
      ],
      "new_value": [
        "13.236.126.151",
        "52.64.248.33"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f1f81e86-afaa-4f87-97d5-1d31d2b2b01a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e3a2d6a4-9381-4d72-97f4-d161b83a9aab",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:33:41.268655+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.59.169.26",
        "23.59.169.33"
      ],
      "new_value": [
        "23.46.228.165",
        "23.46.228.179"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "26aeb75f-c802-4759-a4f1-7e5ed291a331",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "946d0da2-a866-4bfd-9a07-1c6aa6bda25d",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:38:50.991797+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "23.34.124.164"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ebcd123c-e700-4203-9a26-11c89a3fcde6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "36c5671c-76cb-4a0d-b4ea-23458e0d9299",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:38:51.630003+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:281::ebe",
        "2600:1405:8400:283::ebe",
        "2600:1405:8400:289::ebe",
        "2600:1405:8400:28b::ebe",
        "2600:1405:8400:28f::ebe"
      ],
      "new_value": [
        "2600:1408:c400:982::ebe",
        "2600:1408:c400:983::ebe",
        "2600:1408:c400:986::ebe",
        "2600:1408:c400:993::ebe",
        "2600:1408:c400:996::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ebcd123c-e700-4203-9a26-11c89a3fcde6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "97054be6-fb3d-440d-a91d-f499e472b4db",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:35:13.799878+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.10.218.28"
      ],
      "new_value": [
        "23.51.197.231"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "71ef8734-0d78-477c-9337-bfe5846cdcb8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "964de158-7d8b-4346-b423-1a384f52b8bd",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:34:10.547227+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "52.85.12.114",
        "52.85.12.20",
        "52.85.12.29",
        "52.85.12.79"
      ],
      "new_value": [
        "143.204.1.108",
        "143.204.1.44",
        "143.204.1.48",
        "143.204.1.59"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d7e8421f-ad9c-4272-bc74-4bc3b8720004",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6c4efa76-f490-4fee-90d9-fa36cf2e099c",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:34:24.383233+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.222.241.147",
        "23.222.241.150"
      ],
      "new_value": [
        "23.216.145.14",
        "23.216.145.25"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b17baa7-fa24-4e27-a650-f8015e1d4428",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "797559f0-618d-4267-bbea-833d8374a8b8",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:34:24.670424+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8ac"
      ],
      "new_value": [
        "2600:1404:1200:1d::1726:6f87",
        "2600:1404:1200:1d::1726:6fa9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b17baa7-fa24-4e27-a650-f8015e1d4428",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9ef95a87-cc3d-4174-9882-2f9564f43286",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:34:18.563350+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1407:3c00:44::17dc:9044",
        "2600:1407:3c00:44::17dc:9050"
      ],
      "new_value": [
        "2600:1407:3c00:cc::172d:2ec9",
        "2600:1407:3c00:cc::172d:2ed2"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13d073a8-4e57-40d1-afd8-6f26f51d0ac7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a9e5698-1c38-4862-8e62-4247d00036cb",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:38:18.640589+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.173.107",
        "18.155.173.34",
        "18.155.173.39",
        "18.155.173.70"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "499d6ca8-68f1-44fa-9e90-f298311af092",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6a2d1e02-7e60-4b85-99ae-fdb5b9b151f7",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:38:02.669654+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "new_value": [
        "23.222.241.138",
        "23.222.241.144"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f220434d-13d7-4e87-b8d0-ffe078cb3ea6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0ba40c3c-c5bf-4a28-afff-367cbcad8d0d",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:44.777804+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "23.34.124.164"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5e416e47-62c9-4490-9d0f-8dfd40214b34",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0f4b77c2-8032-45c2-9fe0-06a60996852d",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-22T17:37:45.364238+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:280::ebe",
        "2600:1405:8400:282::ebe",
        "2600:1405:8400:284::ebe",
        "2600:1405:8400:28d::ebe",
        "2600:1405:8400:295::ebe"
      ],
      "new_value": [
        "2600:1408:c400:982::ebe",
        "2600:1408:c400:986::ebe",
        "2600:1408:c400:98a::ebe",
        "2600:1408:c400:993::ebe",
        "2600:1408:c400:996::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5e416e47-62c9-4490-9d0f-8dfd40214b34",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f1c2e5f5-eb2a-4a5a-93ef-f5192da2d62e",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:29.245237+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.238.109.43",
        "18.238.109.76",
        "18.238.109.8",
        "18.238.109.83"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "71590a3b-616f-40af-8e84-ec731a30f66b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "71dc4c02-c26b-409a-b9fc-859f77e8fc15",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:36:15.902239+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.61.3.203"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "972bb330-bfca-48b1-9172-723e30df8f7c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "aa6c42ca-67a3-45cb-9449-6a6df73bcdab",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-22T17:37:02.077083+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.219.89.135",
        "23.219.89.139"
      ],
      "new_value": [
        "23.211.139.204",
        "23.211.139.208"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8190026e-2394-4ab8-a33d-47c81a8e7335",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}