{
  "run_date": "2026-10-29",
  "events": [
    {
      "id": "7c013901-f07f-408d-9ec6-5274edbc8927",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-28T21:42:00.094783+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "6d0062fa-b4ad-4c5b-8d91-12ed2bb0a83f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "3f625610-a675-49fb-86b8-43cc2d97c373",
      "domain": "missionaustralia.com.au",
      "domain_id": "3ecf7362-bf67-4da1-a54d-a0f19a6cc4cf",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-28T21:42:38.422521+00:00",
      "summary": "missionaustralia.com.au: nameservers changed",
      "old_value": [
        "ns1-02.azure-dns.com",
        "ns2-02.azure-dns.net",
        "ns3-02.azure-dns.org",
        "ns4-02.azure-dns.info"
      ],
      "new_value": [
        "ns1-02.azure-dns.com",
        "ns2-02.azure-dns.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "b95f96ec-a263-42ab-aa00-10c970fca003",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c9671808-4e75-408d-b3da-8ab83e5dfccc",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-28T21:41:00.856742+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "77331e72-8b81-4eb2-85e9-1d8411d9c5f5",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "52a8c81c-39ec-4610-b6a8-b88cb8bee067",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-28T21:41:02.084722+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "77331e72-8b81-4eb2-85e9-1d8411d9c5f5",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "19885f8c-f3f2-446e-b84e-a19664960358",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-28T21:41:01.759181+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "77331e72-8b81-4eb2-85e9-1d8411d9c5f5",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "2308be2f-b08f-4410-98e6-4156c8907a42",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:41:42.544378+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.197.220.131"
      ],
      "new_value": [
        "23.60.174.138"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "894ca38f-765b-49f8-a65f-e22a28c4677d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "86b2dbdc-cc97-497e-8b44-f39460f11261",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:29.610783+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "184.29.31.224"
      ],
      "new_value": [
        "23.35.29.215"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bd66feb6-ecfb-4557-be71-85c84b5426ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b987eef0-492f-4d75-a6bc-da1d311a5500",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:42:37.637436+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "new_value": [
        "18.155.173.11",
        "18.155.173.23",
        "18.155.173.74",
        "18.155.173.85"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b326496c-0dfd-4394-bf40-7b6fad4deb51",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "656828d0-b969-4f83-aa48-a289d5e5664d",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:41:52.038643+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2800:2:88:1b80:93a1",
        "2600:9000:2348:5e00:2:88:1b80:93a1",
        "2600:9000:2348:6400:2:88:1b80:93a1",
        "2600:9000:2348:6800:2:88:1b80:93a1",
        "2600:9000:2348:8800:2:88:1b80:93a1",
        "2600:9000:2348:9a00:2:88:1b80:93a1",
        "2600:9000:2348:c600:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:7e00:2:88:1b80:93a1",
        "2600:9000:2348:8400:2:88:1b80:93a1",
        "2600:9000:2348:8600:2:88:1b80:93a1",
        "2600:9000:2348:b200:2:88:1b80:93a1",
        "2600:9000:2348:b600:2:88:1b80:93a1",
        "2600:9000:2348:ee00:2:88:1b80:93a1",
        "2600:9000:2348:f800:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6ce0b86b-8200-490e-9540-9966d980870e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "704c9c27-fe31-4be7-b5d1-4bf373931729",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:44:55.239139+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "65.9.148.128",
        "65.9.148.37",
        "65.9.148.57",
        "65.9.148.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "639a69be-dcf6-40d2-991d-d97e8be3ac91",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6194fd3f-006c-4313-8be3-2efaf691c32a",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:42:21.978255+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "52.222.205.11",
        "52.222.205.113",
        "52.222.205.80",
        "52.222.205.92"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "005bc008-a250-4bcb-95f7-6094ca0823e9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "438e0110-5faf-4b75-9745-ab2fc246905c",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:43:11.893729+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.53.11.138",
        "23.53.11.146"
      ],
      "new_value": [
        "23.47.144.134",
        "23.47.144.138"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "586ca86c-88ac-4298-8dbd-d0b2b4142a4a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5e9bb2a8-6deb-4c48-a574-06763d9fcc02",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:43:12.580253+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:c::1730:cb86",
        "2600:1408:ec00:c::1730:cb8f"
      ],
      "new_value": [
        "2600:1408:ec00:b::1730:cba9",
        "2600:1408:ec00:b::1730:cbb2"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "586ca86c-88ac-4298-8dbd-d0b2b4142a4a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "158ce6d4-6285-4ceb-8119-4a1fb158a55b",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:38:55.857544+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.211.124.194",
        "23.211.124.209"
      ],
      "new_value": [
        "23.48.203.145",
        "23.48.203.147"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4e122e6d-55cc-48a6-887a-3ed80e5035c7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "46005eab-2614-4fba-a7fe-5855a4dddf58",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:38:56.505591+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:1d::17c2:7f2f",
        "2600:1405:7400:1d::17c2:7f37"
      ],
      "new_value": [
        "2600:1408:ec00:2f::1735:b85",
        "2600:1408:ec00:2f::1735:b91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4e122e6d-55cc-48a6-887a-3ed80e5035c7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d32a7f4a-ea32-4c13-a25c-aa6c04940ed0",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:06.261249+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "184.25.255.51",
        "184.25.255.59"
      ],
      "new_value": [
        "23.221.227.200",
        "23.221.227.227"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9789ac22-a9e0-42c9-a013-b2a282f9fb32",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "85a5d4b5-d728-493f-a086-351037ee3f67",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:44:56.683915+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:e83::ebe",
        "2600:1408:5400:e8d::ebe",
        "2600:1408:5400:e91::ebe",
        "2600:1408:5400:e95::ebe",
        "2600:1408:5400:ea0::ebe"
      ],
      "new_value": [
        "2600:1408:5400:e84::ebe",
        "2600:1408:5400:e85::ebe",
        "2600:1408:5400:e8b::ebe",
        "2600:1408:5400:e8c::ebe",
        "2600:1408:5400:e94::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "073d1a1e-f218-41f2-913d-cc3e2ec1f362",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b95714b8-7909-4929-8313-31171f904d93",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:40:54.524483+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "184.84.194.28"
      ],
      "new_value": [
        "23.52.211.186"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1eecfbfb-b462-4948-8944-ff66d97bb7a4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "abcace0e-6e82-43e5-a4bf-6904fd23258d",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:59.226811+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "143.204.1.104",
        "143.204.1.30",
        "143.204.1.34",
        "143.204.1.67"
      ],
      "new_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e8eb176b-6f94-4b07-b5aa-575874a59491",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9a82e67d-b15b-40f6-87fb-94e1028ab8b6",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:42:27.565848+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.33.238.100",
        "23.33.238.111",
        "23.33.238.112",
        "23.33.238.115"
      ],
      "new_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e44c5785-cd68-4004-80bd-ec6855c55128",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fd24a64c-3e37-44db-a48f-0e999549446e",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:35.291048+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "65.9.148.112",
        "65.9.148.17",
        "65.9.148.22",
        "65.9.148.81"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "051f0aae-e047-4d6f-b939-5bb90e80ef2e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1d450b23-68e6-4ed9-9b53-9e5213c959a3",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:52.952463+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.220.103.68",
        "23.220.103.70"
      ],
      "new_value": [
        "23.212.250.27",
        "23.212.250.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2349a297-65f1-4837-9119-545ee8282af2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2743a477-b93a-4305-a7ef-b0af85493f9c",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:39:53.615407+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:8::172d:7b44",
        "2600:1405:7400:8::172d:7b4e"
      ],
      "new_value": [
        "2600:1408:c400:c::17cd:6895",
        "2600:1408:c400:c::17cd:6896"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2349a297-65f1-4837-9119-545ee8282af2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "978bb8a4-f077-4bca-a6f2-cb44d1eeb350",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:39:40.696895+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.210.216.134",
        "23.210.216.136"
      ],
      "new_value": [
        "23.48.203.135",
        "23.48.203.142"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "116722df-af55-4d61-8075-bc744c65c082",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "42f8f9b7-73ff-479c-8cd0-fc8904d0f693",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:39:41.388369+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:ef::17d8:938c",
        "2600:1409:9800:ef::17d8:9390"
      ],
      "new_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "116722df-af55-4d61-8075-bc744c65c082",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b5c11564-534a-444f-865e-4ee6943f7efb",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:44:05.254325+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "new_value": [
        "23.205.110.137",
        "23.205.110.143"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "af5026f7-75a0-478f-9720-24b187dcd674",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8dbb97ff-bb65-4d24-9ea1-863ed6f9a908",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-28T21:43:50.502171+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:e89::ebe",
        "2600:1408:5400:e8e::ebe",
        "2600:1408:5400:e8f::ebe",
        "2600:1408:5400:e9a::ebe",
        "2600:1408:5400:ea1::ebe"
      ],
      "new_value": [
        "2600:1408:5400:e83::ebe",
        "2600:1408:5400:e88::ebe",
        "2600:1408:5400:e8d::ebe",
        "2600:1408:5400:e91::ebe",
        "2600:1408:5400:ea0::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "801761f6-b2ba-41d3-8b85-0651476f078f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "74b371d1-d922-4845-91fd-d986869f9998",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:42:06.312062+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.213.45.110"
      ],
      "new_value": [
        "23.61.3.203"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "21ca72b7-720a-497d-b64d-aea802e6c1a5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "db68c5e6-1a94-43ba-be32-8630dd230037",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-28T21:42:51.699647+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.62.46.166",
        "23.62.46.175"
      ],
      "new_value": [
        "23.34.62.165",
        "23.34.62.167"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "676d9868-d8d2-434f-aadf-f1a518b19b33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}