{
  "run_date": "2026-11-07",
  "events": [
    {
      "id": "e4412fbc-be60-41b0-a22f-0658453c182b",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-11-06T22:06:17.495910+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "dc3fbd8b-151b-46e9-a95f-e031d6d1cad6",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7600169f-5faf-453a-91e0-be4b8618c573",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-11-06T22:06:18.756823+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "dc3fbd8b-151b-46e9-a95f-e031d6d1cad6",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "0b8a2423-ac7a-499d-b26e-ac21bb37be00",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-11-06T22:06:18.428437+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dc3fbd8b-151b-46e9-a95f-e031d6d1cad6",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "e981ad4a-5f3f-44bb-ba5d-63f3dc9d4a0a",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:06:46.244683+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.48.8.128"
      ],
      "new_value": [
        "23.45.136.113"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "303efe6d-8f9b-48a0-ae56-5b8988a3eae8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2aab2e0e-bc8d-4ffa-b9a0-a9da914f7b5f",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:04:48.308444+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "184.29.31.224"
      ],
      "new_value": [
        "23.202.154.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "742470f4-f46a-4efa-a26a-30620d5eeb40",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dfbcaa7c-d0af-4774-8285-c2b0683c21ad",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:07:51.283576+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "3.175.34.33",
        "3.175.34.37",
        "3.175.34.65",
        "3.175.34.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6ff6277f-ba17-43b1-a424-7a20853dcec5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "581334a6-3043-449f-b519-3b1dfe1a0e78",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:22.666991+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.222.205.182"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1e25d955-2201-4d5e-a12b-7c335f4ce8ed",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "639bb8b9-efcf-4073-b885-9a7bcb67cdfb",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:07:03.438363+00:00",
      "summary": "care.org.au: a_records changed",
      "old_value": [
        "3.164.92.29",
        "3.164.92.6",
        "3.164.92.8",
        "3.164.92.9"
      ],
      "new_value": [
        "18.67.39.35",
        "18.67.39.43",
        "18.67.39.68",
        "18.67.39.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "42550bd2-2719-40d3-9b71-8b9fa80bc006",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9fdd5bbb-c385-4746-9f8d-3b8d86015fd7",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:07:03.717910+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2843:0:2:88:1b80:93a1",
        "2600:9000:2843:6e00:2:88:1b80:93a1",
        "2600:9000:2843:7800:2:88:1b80:93a1",
        "2600:9000:2843:9400:2:88:1b80:93a1",
        "2600:9000:2843:b200:2:88:1b80:93a1",
        "2600:9000:2843:b600:2:88:1b80:93a1",
        "2600:9000:2843:dc00:2:88:1b80:93a1",
        "2600:9000:2843:f200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1200:2:88:1b80:93a1",
        "2600:9000:2348:2400:2:88:1b80:93a1",
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:9000:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:de00:2:88:1b80:93a1",
        "2600:9000:2348:e800:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "42550bd2-2719-40d3-9b71-8b9fa80bc006",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e2169a1c-20ff-42aa-92fa-2c33f5824051",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:07:25.871498+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.67.17.123",
        "18.67.17.36",
        "18.67.17.45",
        "18.67.17.54"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "60918e94-86ca-4192-a213-fa8da5d9a54c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c978c02e-4d7e-4513-ab23-eec002cdc70d",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:12.613263+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.34.62.165",
        "23.34.62.171"
      ],
      "new_value": [
        "23.62.46.134",
        "23.62.46.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7afbf1d5-12b1-4e6b-9c0e-b28813e9ac42",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f227f9eb-ce34-42be-acce-3b84125e2da7",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:08:12.934731+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:7::17d1:54ad",
        "2600:1405:8400:7::17d1:54bb"
      ],
      "new_value": [
        "2600:1406:2e00:28::17cb:a60f",
        "2600:1406:2e00:28::17cb:a61e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7afbf1d5-12b1-4e6b-9c0e-b28813e9ac42",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f74d59eb-19e6-4702-8309-916f132f9ba9",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:04:14.312124+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "184.25.255.48",
        "184.25.255.49"
      ],
      "new_value": [
        "23.48.203.140",
        "23.48.203.147"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8e72f863-062c-484f-a529-02a5bc1d53ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ec4a2492-8031-4a52-8fa6-b8b0e8c69b36",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:04:15.055086+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:ec00:25::17dc:a312",
        "2600:1404:ec00:25::17dc:a315"
      ],
      "new_value": [
        "2600:141b:1c00:18::17c8:58ba",
        "2600:141b:1c00:18::17c8:58bb"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8e72f863-062c-484f-a529-02a5bc1d53ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ca9121c9-7a1c-4f8d-8778-d0eb99e8bb99",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:32.031209+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "13.236.75.111",
        "52.63.242.69"
      ],
      "new_value": [
        "13.211.217.37",
        "13.236.75.111"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d6edc2e9-c2d7-487e-9b6c-ba3dd794c8d9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ae9911a9-6e22-4f53-b48b-026eebc1b79f",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:04:25.161739+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.217.55.64",
        "23.217.55.68"
      ],
      "new_value": [
        "23.212.249.203",
        "23.212.249.210"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e1e4de8e-a9b9-4e8b-bfc9-c27d5c9b7804",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6d38b028-947d-4a40-bf3f-756db711eccd",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:09:51.371215+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.61.208.154"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "235549c1-1d48-4623-84b9-8cd2e0eab60b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cb911941-cf30-414d-b673-8703df673366",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:09:52.224456+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:481::ebe",
        "2600:1405:8400:482::ebe",
        "2600:1405:8400:486::ebe",
        "2600:1405:8400:487::ebe",
        "2600:1405:8400:489::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1780::ebe",
        "2600:1409:9800:1781::ebe",
        "2600:1409:9800:1786::ebe",
        "2600:1409:9800:1788::ebe",
        "2600:1409:9800:1789::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "235549c1-1d48-4623-84b9-8cd2e0eab60b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "07713ee3-ad73-41a4-b4df-4285b9c1abe2",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:06:10.379061+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.64.253.58"
      ],
      "new_value": [
        "184.25.63.8"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f17d1e18-5df7-4e4f-8cbf-23985978929b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "55abdf83-1a0d-4597-a61e-7c1542e9eecf",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:05:14.499707+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "new_value": [
        "18.160.78.30",
        "18.160.78.55",
        "18.160.78.76",
        "18.160.78.85"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c9da54f0-f5f2-4488-8646-0f63f43a9369",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "de5c8f09-027f-4198-ab9e-6d4349d0eac7",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:04:54.481878+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0a2a7897-dfdb-4dcc-95fc-f59404573481",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0f698d2d-e985-43b9-ae9d-98b6a1f06dc8",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:05:09.457204+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.66.127.141",
        "23.66.127.170"
      ],
      "new_value": [
        "23.73.207.153"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a48a8aa5-2737-4154-9ba9-462646d04ed8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "23a2be9f-bc9b-4160-babb-97d53e99ef5f",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:05:10.092876+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8ac"
      ],
      "new_value": [
        "2600:1408:c400:c::17cd:6895",
        "2600:1408:c400:c::17cd:6896"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a48a8aa5-2737-4154-9ba9-462646d04ed8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "48e69f87-45f6-49aa-a7f0-72744bf57ba2",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:04:57.586976+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "184.25.255.36",
        "184.25.255.45"
      ],
      "new_value": [
        "23.0.162.38",
        "23.0.162.45"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c8b1f65c-be7f-4227-99d0-f3a1ffea383d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c43f7b4c-2497-4289-b174-bc51999a9a85",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:04:57.873225+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:ec00:25::17dc:a307",
        "2600:1404:ec00:25::17dc:a30b"
      ],
      "new_value": [
        "2600:1402:b800:24::6847:8f8d",
        "2600:1402:b800:24::6847:8fb6"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c8b1f65c-be7f-4227-99d0-f3a1ffea383d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "833d84dd-746c-41e7-ac68-97f3acb521e7",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:09:23.443344+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "52.85.132.114",
        "52.85.132.26",
        "52.85.132.42",
        "52.85.132.78"
      ],
      "new_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7676c92a-7777-4935-8520-7bfa67c0add5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "21f7296d-62b0-44a2-b6d6-eeabb48c87e3",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:47.371923+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.61.208.154"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "292c7409-2682-428f-8f1d-0064165d0181",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b2423f32-c764-4453-8b42-d29373101238",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-06T22:08:47.653991+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:481::ebe",
        "2600:1405:8400:482::ebe",
        "2600:1405:8400:483::ebe",
        "2600:1405:8400:487::ebe",
        "2600:1405:8400:489::ebe"
      ],
      "new_value": [
        "2600:1406:2e00:78e::ebe",
        "2600:1406:2e00:794::ebe",
        "2600:1406:2e00:79a::ebe",
        "2600:1406:2e00:7a2::ebe",
        "2600:1406:2e00:7a7::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "292c7409-2682-428f-8f1d-0064165d0181",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "66d6a561-8447-4289-aa7a-0bf711665d7c",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:05:54.336387+00:00",
      "summary": "unsw.edu.au: a_records changed",
      "old_value": [
        "18.65.244.101",
        "18.65.244.20",
        "18.65.244.73",
        "18.65.244.8"
      ],
      "new_value": [
        "18.67.93.113",
        "18.67.93.67",
        "18.67.93.81",
        "18.67.93.97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "92bde913-ee88-4fd7-82bc-8cb20b39b9e2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f20bfc9e-f5e2-4d4f-a697-05ae125fc6c3",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:36.237103+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.20.119",
        "65.8.20.123",
        "65.8.20.125",
        "65.8.20.66"
      ],
      "new_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "02b6a791-8d8d-4fd3-a33f-d933acfffb72",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "95877ba4-7f66-46d4-88c6-7989ae14e5af",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:07:10.204440+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.39.185.206"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1b71645d-2aa2-4f5c-85fe-3dafa6fcab1b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "071be804-9657-4995-9009-14398383b354",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-06T22:08:07.287387+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "184.25.123.27",
        "184.25.123.63"
      ],
      "new_value": [
        "23.59.88.37",
        "23.59.88.47"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "04c45a00-c362-4f21-9b0e-39ad8cdb63da",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}