{
  "run_date": "2026-10-31",
  "events": [
    {
      "id": "9ab96bbf-2f4d-4809-8d82-0de0d57b717d",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-30T21:34:35.102460+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "7d1d3b40-6fb4-4ae0-b0dd-986f6ceb5be8",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a6279b17-2658-45ee-8b2c-b1f4bbdd6197",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-30T21:30:55.603504+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "788af195-fc5c-4625-8c32-a589a6beae24",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "beafe8f8-37f1-4b89-8f4e-00ad00fa1b0f",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-30T21:30:56.821987+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "788af195-fc5c-4625-8c32-a589a6beae24",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "64b6ccb7-6cb3-46c8-be57-3f0caec80d50",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-30T21:30:56.500268+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "788af195-fc5c-4625-8c32-a589a6beae24",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "4854f8e5-e237-4ba3-9525-6677a4a57b0d",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:31:27.599401+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.60.174.138"
      ],
      "new_value": [
        "184.29.30.133"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "618c2d5f-1b1b-4fb4-a270-ec6003df8579",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fa2081b3-a1fb-4d36-be65-67101630c6b0",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:29:11.760729+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.34.125.212"
      ],
      "new_value": [
        "184.29.31.224"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "04e7ebac-9f03-410a-a963-8ec9555f10ad",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a5e57334-af23-4c43-969e-a7938dc1e50d",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:32:18.274208+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "53d263ad-d73f-4610-9684-621c805e6abe",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "108144bc-11e3-47ec-b045-df52324ea511",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:33:04.262178+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.222.205.182"
      ],
      "new_value": [
        "184.28.3.190"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0f39b24c-46c3-431e-9c71-96b0ed931e85",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "92e5b7be-7762-4bff-b3fc-16200e696aaf",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:31:30.970173+00:00",
      "summary": "care.org.au: a_records changed",
      "old_value": [
        "18.67.39.35",
        "18.67.39.43",
        "18.67.39.68",
        "18.67.39.96"
      ],
      "new_value": [
        "18.160.213.111",
        "18.160.213.12",
        "18.160.213.120",
        "18.160.213.8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "51f6b639-5d92-408f-8aba-3ad7009c6839",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d447a4c5-d830-4280-be5d-8f82467b706c",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:31:31.281492+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1c00:2:88:1b80:93a1",
        "2600:9000:2348:2a00:2:88:1b80:93a1",
        "2600:9000:2348:4000:2:88:1b80:93a1",
        "2600:9000:2348:4400:2:88:1b80:93a1",
        "2600:9000:2348:5a00:2:88:1b80:93a1",
        "2600:9000:2348:a200:2:88:1b80:93a1",
        "2600:9000:2348:b200:2:88:1b80:93a1",
        "2600:9000:2348:e200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:24d2:5200:2:88:1b80:93a1",
        "2600:9000:24d2:6200:2:88:1b80:93a1",
        "2600:9000:24d2:aa00:2:88:1b80:93a1",
        "2600:9000:24d2:c600:2:88:1b80:93a1",
        "2600:9000:24d2:d000:2:88:1b80:93a1",
        "2600:9000:24d2:dc00:2:88:1b80:93a1",
        "2600:9000:24d2:ee00:2:88:1b80:93a1",
        "2600:9000:24d2:f200:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "51f6b639-5d92-408f-8aba-3ad7009c6839",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "eb6ec41f-ee9f-49c6-8815-149827871e47",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:34:38.707042+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "new_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "73421640-ef13-4019-881e-7318c5124e72",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c7749d16-774b-41c1-be52-7114c1dea084",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:32:54.750779+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.209.84.173",
        "23.209.84.187"
      ],
      "new_value": [
        "184.30.150.71",
        "184.30.150.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f40f1668-e25a-466f-b1ee-78aa162e89fe",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "197f7808-9aed-4e97-bec7-f3bc149b6d6a",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:32:55.512805+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "new_value": [
        "2600:140a:1000:b::b81e:9647",
        "2600:140a:1000:b::b81e:9653"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f40f1668-e25a-466f-b1ee-78aa162e89fe",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2f4752fe-0f23-47bc-960d-b953bafcf0ef",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:28:36.500813+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.48.203.140",
        "23.48.203.147"
      ],
      "new_value": [
        "23.201.195.32"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "23823e00-f7c7-4bcb-9e9e-8ec0a70d01b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7ea8262e-b8c2-4228-a176-020bb4cf1ca7",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:28:36.846409+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:141b:f000:d::684d:b2b4",
        "2600:141b:f000:d::684d:b2b7"
      ],
      "new_value": [
        "2600:1404:ec00:25::17dc:a312",
        "2600:1404:ec00:25::17dc:a315"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "23823e00-f7c7-4bcb-9e9e-8ec0a70d01b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2bfac4eb-c4fa-437b-b103-146a6ff25988",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:33:12.988342+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "13.211.52.232",
        "32.237.43.142"
      ],
      "new_value": [
        "13.211.52.232",
        "52.63.242.69"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "896ecc75-7d04-463c-9730-8e005b543092",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "766af608-5467-489b-914a-f7a569bb19d5",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:28:47.517475+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.212.251.134",
        "23.212.251.154"
      ],
      "new_value": [
        "23.217.55.64",
        "23.217.55.68"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "694f57c9-094f-4794-927d-3a7445b7732f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bcbf948e-fe9f-4b04-8dc2-0c30fd7c5fe0",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:34:35.383300+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "184.28.2.162"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7d1d3b40-6fb4-4ae0-b0dd-986f6ceb5be8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "355788bc-1e9b-4223-97f3-8e76ed982e71",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:34:36.083640+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:380::ebe",
        "2600:1405:8400:382::ebe",
        "2600:1405:8400:388::ebe",
        "2600:1405:8400:38f::ebe",
        "2600:1405:8400:397::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1a81::ebe",
        "2600:1409:9800:1a87::ebe",
        "2600:1409:9800:1a88::ebe",
        "2600:1409:9800:1a8e::ebe",
        "2600:1409:9800:1a8f::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7d1d3b40-6fb4-4ae0-b0dd-986f6ceb5be8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c9b6358a-ac96-45eb-8dc1-f488c4d6e642",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:30:31.548637+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.64.152.109"
      ],
      "new_value": [
        "23.203.238.223"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "36e527d1-9932-4431-b53d-f9e6906a2492",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9b762bd0-9835-4e8c-a75f-7a425a9714d5",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:29:51.847272+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "52.85.132.107",
        "52.85.132.19",
        "52.85.132.3",
        "52.85.132.65"
      ],
      "new_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f57c4bb6-2ec1-4805-b0ce-710cd86cb1f3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fa12205f-2f28-4ced-970a-934720fa7605",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:32:10.311712+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "new_value": [
        "23.33.238.111",
        "23.33.238.112",
        "23.33.238.115"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "de02ce53-ac42-47a1-9cb4-da2893638e6b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3152de9f-09a6-42b2-978e-a89c79b45fbb",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:29:17.272246+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "new_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "960ecf8b-bf8f-4a4e-86ab-70599de1ee4e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a739d8a1-cdd2-4f31-b458-edc1845f5503",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:29:33.775014+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.73.207.172"
      ],
      "new_value": [
        "23.220.103.68",
        "23.220.103.70"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a59bae8d-1ff7-4495-b907-de480c455c58",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a67efb14-dacd-4e1d-9f4b-912aa645ef80",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:29:34.098824+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:c400:c::17cd:6895",
        "2600:1408:c400:c::17cd:6896"
      ],
      "new_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8b3"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a59bae8d-1ff7-4495-b907-de480c455c58",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e17d6637-343b-4516-b48c-102023d0bb05",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:29:33.276158+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "69.192.139.106",
        "69.192.139.88"
      ],
      "new_value": [
        "23.48.203.132",
        "23.48.203.142"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fc60d143-8c2a-44f1-92e0-2e96f535bd53",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a859592-cda6-4f78-aab0-89331a67d9fb",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:29:33.953141+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fc60d143-8c2a-44f1-92e0-2e96f535bd53",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4d0f69a1-24ba-4b00-aa8d-dba9ec3cb32f",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:34:03.901233+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "52.85.132.114",
        "52.85.132.26",
        "52.85.132.42",
        "52.85.132.78"
      ],
      "new_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5923e36a-ba05-4602-8ed8-87166fd2f462",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f3f7d3f5-6e79-4a10-b3c0-4e6ae5bdc1b8",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:33:46.750745+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.205.110.137",
        "23.205.110.143"
      ],
      "new_value": [
        "23.212.250.18",
        "23.212.250.20"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6e203703-7407-4ca2-b4ad-f23ba56c172f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5d51fc31-9f3b-4f83-be6a-b605bd0ecb60",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:33:31.890720+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.222.204.163"
      ],
      "new_value": [
        "184.28.2.162"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "557fe160-0b53-4d69-88b3-c22f2057cc36",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d067c807-7db2-441c-a761-8eae7a693dbd",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-30T21:33:32.508126+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:380::ebe",
        "2600:1405:8400:382::ebe",
        "2600:1405:8400:388::ebe",
        "2600:1405:8400:38f::ebe",
        "2600:1405:8400:397::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1a81::ebe",
        "2600:1409:9800:1a87::ebe",
        "2600:1409:9800:1a8a::ebe",
        "2600:1409:9800:1a8e::ebe",
        "2600:1409:9800:1a8f::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "557fe160-0b53-4d69-88b3-c22f2057cc36",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dc255a88-1a09-489c-87ea-a14f942089e5",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:33:18.528168+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.20.119",
        "65.8.20.123",
        "65.8.20.125",
        "65.8.20.66"
      ],
      "new_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a6a386e-0d27-4586-a109-321dc4b4e632",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6458825d-1ff0-4f5d-a74d-1e836bb0234c",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-30T21:32:34.535908+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.220.161.74",
        "23.220.161.86"
      ],
      "new_value": [
        "23.46.216.205",
        "23.46.216.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b6558f97-7c9c-42b5-a4b9-13dc0b6ab44b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}