{
  "run_date": "2026-11-08",
  "events": [
    {
      "id": "cdacf744-7833-48d1-8241-810512d5420d",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-11-07T20:54:06.974162+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "964f1d12-da90-45a4-a1a6-d49ed3f92dbb",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "922a4edc-160b-4b6f-bbfe-dfbe178361a9",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-11-07T20:54:08.336210+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "964f1d12-da90-45a4-a1a6-d49ed3f92dbb",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "93727703-bc14-4c7b-8308-474bff76c241",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-11-07T20:54:08.089702+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "964f1d12-da90-45a4-a1a6-d49ed3f92dbb",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "37b4ee29-1567-4c30-ad8a-ccfd90b6154a",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:54:36.977024+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.45.136.113"
      ],
      "new_value": [
        "23.35.28.131"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "914d6df3-f5cc-40c4-b237-0b95c8da8397",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ef64862f-5340-468c-aab9-e7925edbaf00",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:52:33.707140+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.202.154.130"
      ],
      "new_value": [
        "23.35.29.215"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e1f2cade-62d2-4d68-be4a-cc8b996f6326",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ec5c08a8-0535-4dfa-b6dc-b9d216bc4bda",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:55:37.094560+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.175.34.33",
        "3.175.34.37",
        "3.175.34.65",
        "3.175.34.75"
      ],
      "new_value": [
        "13.249.74.101",
        "13.249.74.111",
        "13.249.74.121",
        "13.249.74.27"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1b944c70-d205-4d81-8cd0-772895cdeed8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9ddf0de4-7c46-41d9-853c-b9616dbfe25e",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:56:09.533352+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "184.28.3.190"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "661adce3-46f2-4aa4-ab27-223645424c20",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9a774223-9153-48ec-ac8c-e7cc4f53ed21",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:54:50.365665+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1200:2:88:1b80:93a1",
        "2600:9000:2348:2400:2:88:1b80:93a1",
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:9000:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:de00:2:88:1b80:93a1",
        "2600:9000:2348:e800:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2e00:2:88:1b80:93a1",
        "2600:9000:2348:3600:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:8400:2:88:1b80:93a1",
        "2600:9000:2348:a00:2:88:1b80:93a1",
        "2600:9000:2348:c800:2:88:1b80:93a1",
        "2600:9000:2348:f800:2:88:1b80:93a1",
        "2600:9000:2348:fc00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "eae38b08-6687-4744-be48-53502cdd9c1b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dcc901a7-f3d2-42ba-8400-6c2a50752c8b",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:57:58.954102+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "new_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c6694286-46ef-41b2-8ac1-605dd49425ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d00fc4b6-bd4c-4cf5-8be4-c760aaba498d",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:55:18.212386+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "new_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "62a6741f-72a6-4a24-a568-1ce84cf04aa8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "63d89ba2-3b91-4f21-a7af-69dbbc025673",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:55:59.677422+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.62.46.134",
        "23.62.46.152"
      ],
      "new_value": [
        "184.30.150.71",
        "184.30.150.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "db87e1ff-42fe-4428-83d7-33e08a8cf9c4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "30689c1e-747e-442a-b720-b603628601c5",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:55:59.974975+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:28::17cb:a60f",
        "2600:1406:2e00:28::17cb:a61e"
      ],
      "new_value": [
        "2600:1404:ec00:27::17df:f008",
        "2600:1404:ec00:27::17df:f00f"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "db87e1ff-42fe-4428-83d7-33e08a8cf9c4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "90ba1ce6-1b68-43da-b552-bf05c898cdf0",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:51:59.156217+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:141b:1c00:18::17c8:58ba",
        "2600:141b:1c00:18::17c8:58bb"
      ],
      "new_value": [
        "2600:1408:c400:16::17d4:f80a",
        "2600:1408:c400:16::17d4:f80b"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "32de1d28-0400-4221-8e31-3a299ae269de",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1ab4bddd-27e8-44ee-8be9-56c068aa1647",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:57:36.520994+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "184.28.2.162"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "08f585d6-c74c-4910-ae6e-017fc888cbc3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "912170c5-6e3b-4a9d-9f35-540c8b9bd9f6",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:57:36.819143+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1780::ebe",
        "2600:1409:9800:1781::ebe",
        "2600:1409:9800:1786::ebe",
        "2600:1409:9800:1788::ebe",
        "2600:1409:9800:1789::ebe"
      ],
      "new_value": [
        "2600:1404:ec00:1287::ebe",
        "2600:1404:ec00:128b::ebe",
        "2600:1404:ec00:128d::ebe",
        "2600:1404:ec00:1295::ebe",
        "2600:1404:ec00:1296::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "08f585d6-c74c-4910-ae6e-017fc888cbc3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8ed30848-82da-4e94-8d2a-d2a687a4ac7e",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:53:59.886263+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "184.25.63.8"
      ],
      "new_value": [
        "184.84.194.28"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bdc23aac-c02b-4373-83a3-e495195492dd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "48c9327f-4233-4158-b798-246efcf9ed9c",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:53:04.751615+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "18.160.78.30",
        "18.160.78.55",
        "18.160.78.76",
        "18.160.78.85"
      ],
      "new_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "726d9611-f9e3-4f51-a90f-8e5d89343bc4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9d984272-fde7-4e44-bdfd-2318deb4ee73",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:52:57.658460+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.73.207.153"
      ],
      "new_value": [
        "23.212.250.27",
        "23.212.250.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "59052c93-27bd-4175-924a-744dd78c8f5e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b8a26bdb-6eeb-4f5e-ae80-7bf014bc549d",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:52:47.957615+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.0.162.38",
        "23.0.162.45"
      ],
      "new_value": [
        "23.199.232.73",
        "23.199.232.80"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fffb323d-8d45-4f09-9601-d4d01a82f6b8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "54140c55-a7f3-43ed-ad1a-e4bea75e38fb",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:52:48.238983+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1402:b800:24::6847:8f8d",
        "2600:1402:b800:24::6847:8fb6"
      ],
      "new_value": [
        "2600:1406:5e00:9f::17d2:d886",
        "2600:1406:5e00:9f::17d2:d888"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fffb323d-8d45-4f09-9601-d4d01a82f6b8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "21309580-0546-4b97-8a67-913b0941ad7d",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:57:08.268849+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "new_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ec24a0cb-e41e-4af3-a764-dd781383098d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "16d17b87-f7ae-4416-8b1f-f94f25f44335",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:57:05.384560+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.219.78.142",
        "23.219.78.143"
      ],
      "new_value": [
        "23.195.81.161",
        "23.195.81.179"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8a99abac-e7f5-4986-8759-a4622302049c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cf543290-a63c-4927-8613-144e669d42eb",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:56:34.698273+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "184.28.2.162"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b18f0b43-62db-4dfd-8948-62f14797c1cf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e783c03d-a623-44ef-973f-60da91d1ec4a",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-11-07T20:56:34.994151+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:78e::ebe",
        "2600:1406:2e00:794::ebe",
        "2600:1406:2e00:79a::ebe",
        "2600:1406:2e00:7a2::ebe",
        "2600:1406:2e00:7a7::ebe"
      ],
      "new_value": [
        "2600:1404:ec00:1282::ebe",
        "2600:1404:ec00:128e::ebe",
        "2600:1404:ec00:1291::ebe",
        "2600:1404:ec00:1292::ebe",
        "2600:1404:ec00:1297::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b18f0b43-62db-4dfd-8948-62f14797c1cf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c593c76d-44c6-489a-b584-7415968bf484",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:56:24.503131+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "new_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "24ce211e-eafb-493b-9091-6feb2925bd36",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4b2d0690-31a5-467b-a687-c06ab69aa8a4",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:55:01.085295+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "23.34.125.185"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5cedc73a-1524-48ee-8d74-af0892b19c0f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8d79d3b6-0f02-4aad-b2f8-8a7a77a12799",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-11-07T20:55:50.531532+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.59.88.37",
        "23.59.88.47"
      ],
      "new_value": [
        "23.11.207.233",
        "23.11.207.242"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "75a5b0ac-aeeb-4e1f-ac01-258e67ccc10e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}