{
  "run_date": "2026-11-05",
  "events": [
    {
      "id": "8c73a633-3663-41c8-a7bb-4855e515cb33",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-11-04T22:39:14.764219+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "1682424b-fb8f-48d0-8dfd-7d38eef5301c",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "afa61207-a600-4107-ae1c-d973f31cd684",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-11-04T22:42:21.289720+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "846bab05-9bde-4f23-a6b2-9f0de5acf561",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ffbce94d-b60f-423c-95f2-b21e2efac68e",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-11-04T22:38:20.612968+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "4437a0ee-6647-4756-b7b9-b3936a23562b",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "1dab82be-134d-44a0-a7b7-0305a9808364",
      "domain": "technologyonecorp.com.au",
      "domain_id": "122b4999-5ef8-4c33-86a7-ed401e2858bc",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-11-04T22:39:54.900497+00:00",
      "summary": "technologyonecorp.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "8c468524-0fe0-4d75-81e3-81455269cf16",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "4ef81435-67ee-4603-b836-adbc6bee5ebf",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-11-04T22:38:22.840543+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "4437a0ee-6647-4756-b7b9-b3936a23562b",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "451b021e-3b2d-4f76-ba27-d07894d0b230",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-11-04T22:38:22.510109+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4437a0ee-6647-4756-b7b9-b3936a23562b",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "992cc7b4-d4cf-4ce3-9f2a-4fc8d5746c21",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:38:55.477532+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.38.160.136"
      ],
      "new_value": [
        "23.37.16.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5c297a9e-23f4-42dc-80b2-2e7f91248385",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "88920393-f7da-4752-9d17-31253ce64e5c",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:36:40.527322+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.222.206.184"
      ],
      "new_value": [
        "23.61.3.235"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "724dc00c-a391-4361-ab9c-531f63461912",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c976b2fe-ce31-49ad-95d7-5e85974bedc7",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:40:01.038178+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "52.85.151.19",
        "52.85.151.38",
        "52.85.151.45",
        "52.85.151.72"
      ],
      "new_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "386b260f-e4bd-4bc8-8201-767606979711",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6a978c99-f8dc-484b-a856-459730184405",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:40:33.886862+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "23.217.77.205"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "85b05f73-710b-44f0-89ff-4d323793623a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "66fe2dec-0579-47e1-8ac1-250f132775ba",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:39:04.687395+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2600:2:88:1b80:93a1",
        "2600:9000:2348:4400:2:88:1b80:93a1",
        "2600:9000:2348:4e00:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:9600:2:88:1b80:93a1",
        "2600:9000:2348:9800:2:88:1b80:93a1",
        "2600:9000:2348:d600:2:88:1b80:93a1",
        "2600:9000:2348:f200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:5400:2:88:1b80:93a1",
        "2600:9000:2348:5a00:2:88:1b80:93a1",
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:ca00:2:88:1b80:93a1",
        "2600:9000:2348:d400:2:88:1b80:93a1",
        "2600:9000:2348:f400:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "aa03b1bd-8de8-4117-ae82-a46b0e1ebbbd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "221ff6a7-ce39-4cfe-ae06-b8e41f72fc48",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:42:21.459906+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "65.9.148.128",
        "65.9.148.37",
        "65.9.148.57",
        "65.9.148.67"
      ],
      "new_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fb8da25c-4765-4c16-8645-97090f127e7c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b19adefc-f4d6-4a82-adb2-f6536e676bf7",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:39:32.012411+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "53856c3e-0150-4af5-9cb3-5d5282d99e48",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "95dae2a5-aed9-4fbe-bbe7-0643a2a2dbb8",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:40:22.059530+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.62.46.134",
        "23.62.46.152"
      ],
      "new_value": [
        "23.48.203.169",
        "23.48.203.178"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d79dc085-2888-4887-b6a9-87cdb7622694",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a33c8c64-c7ee-403b-8b03-605dd947044b",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:40:22.731665+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:28::17cb:a60f",
        "2600:1406:2e00:28::17cb:a61e"
      ],
      "new_value": [
        "2600:1408:c400:d::17cd:6a46",
        "2600:1408:c400:d::17cd:6a55"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d79dc085-2888-4887-b6a9-87cdb7622694",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "55ec9e99-1f57-4cc1-87b3-e833ee260c9b",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:36:06.641355+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.210.216.146",
        "23.210.216.169"
      ],
      "new_value": [
        "23.45.123.53",
        "23.45.123.80"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "97fbf316-35cb-4acd-bba3-f40b252cb5fd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fe49bf61-7eca-4d5c-a7a8-a49d96a55016",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:36:07.021773+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:9866",
        "2600:1406:5e00:9c::1720:9872"
      ],
      "new_value": [
        "2600:1405:7400:12::17de:1bad",
        "2600:1405:7400:12::17de:1bb7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "97fbf316-35cb-4acd-bba3-f40b252cb5fd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fdb6b110-ea96-4233-8119-061c4c50a909",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:36:17.147503+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "173.223.234.200",
        "173.223.234.210"
      ],
      "new_value": [
        "23.211.127.32",
        "23.211.127.35"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b3d5c395-8cfd-4ff5-9d55-2c0a26a27d1d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5ccb2af3-d3d0-4be3-b1d6-29825e86f13e",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:42:21.571070+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "23.48.8.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "846bab05-9bde-4f23-a6b2-9f0de5acf561",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fe99515e-fbaf-414d-a475-880b799a5e42",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:42:22.209568+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:783::ebe",
        "2600:1406:2e00:786::ebe",
        "2600:1406:2e00:79e::ebe",
        "2600:1406:2e00:7a7::ebe",
        "2600:1406:2e00:7a9::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:981::ebe",
        "2600:1408:ec00:98b::ebe",
        "2600:1408:ec00:98d::ebe",
        "2600:1408:ec00:98f::ebe",
        "2600:1408:ec00:99e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "846bab05-9bde-4f23-a6b2-9f0de5acf561",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7ac9fc7f-b84b-4e7a-bfa9-af057a322d36",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:38:08.291315+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.203.238.223"
      ],
      "new_value": [
        "184.84.194.28"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a171a2f1-415e-4a7a-8d42-d31f4acce665",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0403a975-a86e-4585-a417-cb9161713b03",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:37:09.220420+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "52.85.132.107",
        "52.85.132.19",
        "52.85.132.3",
        "52.85.132.65"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "22ffa86f-5f5b-4112-9dde-2c24c2b9aaa1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b3771451-01d1-45bf-ac39-378021f6267c",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:36:46.656136+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.238.96.120",
        "18.238.96.122",
        "18.238.96.13",
        "18.238.96.64"
      ],
      "new_value": [
        "65.9.148.112",
        "65.9.148.17",
        "65.9.148.22",
        "65.9.148.81"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1b3c3dc5-2af6-468d-8f79-d46c306b76b1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "30162ab7-58ed-4525-addd-855aa746a649",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:37:03.356096+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.209.84.149",
        "23.209.84.150"
      ],
      "new_value": [
        "23.220.103.68",
        "23.220.103.70"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f72fb2f0-5153-43cf-94c0-5974b9905910",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "310909f6-d299-4ec9-9188-adc49ef59cea",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:37:03.669871+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:f::173e:e276",
        "2600:1405:8400:f::173e:e278"
      ],
      "new_value": [
        "2600:1405:7400:8::172d:7b44",
        "2600:1405:7400:8::172d:7b48"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f72fb2f0-5153-43cf-94c0-5974b9905910",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b310070c-cda2-4681-9039-094596c703c4",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:36:49.779077+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.210.216.134",
        "23.210.216.136"
      ],
      "new_value": [
        "23.205.249.198",
        "23.205.249.205"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "50510279-970c-482b-abf4-96fe3966ebc6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ae298e06-2ddc-401b-8290-ec9b665b0a8c",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:36:50.101414+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1404:ec00:25::17dc:a307",
        "2600:1404:ec00:25::17dc:a309"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "50510279-970c-482b-abf4-96fe3966ebc6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2c51d132-8912-42b2-a5c8-c6ec04fd77e3",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:41:46.487313+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7b9c3001-1cfc-4815-b2fb-eb301d31b232",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b12871f7-3a7e-412d-b786-33e70821b916",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:41:29.537314+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.219.160.6",
        "23.219.160.7"
      ],
      "new_value": [
        "23.212.251.198",
        "23.212.251.207"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dc6d6a48-0825-4844-85cf-35bd34d0a381",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d7d978a0-98db-4a2d-bdea-7db0b469e9ba",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:41:09.331109+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "23.48.8.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8b9aa14a-8b8b-43d4-8b8c-cb8f7da88edb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "57506446-9f88-4ac3-92da-a776fc182657",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-04T22:41:09.962030+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:788::ebe",
        "2600:1406:2e00:78a::ebe",
        "2600:1406:2e00:791::ebe",
        "2600:1406:2e00:79c::ebe",
        "2600:1406:2e00:79d::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:993::ebe",
        "2600:1408:ec00:995::ebe",
        "2600:1408:ec00:997::ebe",
        "2600:1408:ec00:99a::ebe",
        "2600:1408:ec00:9a1::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8b9aa14a-8b8b-43d4-8b8c-cb8f7da88edb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b1c42eb0-0e85-40b2-8532-284327ee46fc",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:37:50.883308+00:00",
      "summary": "unsw.edu.au: a_records changed",
      "old_value": [
        "18.67.93.113",
        "18.67.93.67",
        "18.67.93.81",
        "18.67.93.97"
      ],
      "new_value": [
        "18.65.244.101",
        "18.65.244.20",
        "18.65.244.73",
        "18.65.244.8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "983a2368-d35a-42ae-9b7e-bc44b605fe33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "54b9e1d6-487f-4b72-a275-026a149801d0",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:40:54.395756+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e452284a-f5b0-4b3d-b240-5fe3978c8152",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7e1454c3-c436-4d35-81fe-1e04c9a435e0",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:39:18.618449+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.61.209.163"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9c709c5f-b815-444f-9bf5-17bdaf64d8b9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e065a20a-3f26-461c-b3d8-67584d88c9bf",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-04T22:40:15.427433+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.11.207.233",
        "23.11.207.242"
      ],
      "new_value": [
        "23.212.62.206",
        "23.212.62.214"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "358e04b1-668c-4761-a727-6c847a9bac34",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}