{
  "run_date": "2026-07-03",
  "events": [
    {
      "id": "01c323e4-f753-4a10-aaf4-d10a63705ca5",
      "domain": "allianz.com.au",
      "domain_id": "2a7fd778-8272-4a06-bc21-69168001e576",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-07-02T18:49:56.901213+00:00",
      "summary": "allianz.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "d670f8d6-757e-4e44-92d5-6dbf44bca4ec",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "5d998636-7a5c-406d-b5f0-ed52b496d6e3",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-07-02T18:47:51.410265+00:00",
      "summary": "sydney.edu.au: rdap_status changed",
      "old_value": [
        "active"
      ],
      "new_value": [
        "renew period",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "6b21e621-6f9e-4524-a98d-96c4a062f963",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "e36b1d46-408c-48e2-ab8c-f522c946dc88",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-02T18:47:45.071425+00:00",
      "summary": "beyondblue.org.au: spf_present changed",
      "old_value": false,
      "new_value": true,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8498b9e1-dcad-46c0-a1f1-ac7ac49dcc4f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "5282ace7-9171-4c03-a154-7d4deb3c54e8",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-02T18:46:30.654994+00:00",
      "summary": "servicesaustralia.gov.au: spf_present changed",
      "old_value": false,
      "new_value": true,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a9d784aa-076a-4f6c-9725-813c9bd06a52",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "90b46e26-ed4e-4248-a649-5a56547ba8ba",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "dmarc_present_changed",
      "event_label": "DMARC presence change",
      "event_time": "2026-07-02T18:46:30.954430+00:00",
      "summary": "servicesaustralia.gov.au: dmarc_present changed",
      "old_value": false,
      "new_value": true,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a9d784aa-076a-4f6c-9725-813c9bd06a52",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c12cbb18-3001-4640-9e9d-f9ec610d86b0",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-02T18:47:44.275512+00:00",
      "summary": "beyondblue.org.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 beyondblue-org-au.mail.protection.outlook.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8498b9e1-dcad-46c0-a1f1-ac7ac49dcc4f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "e191c5e3-36db-4c29-9efb-27acd2dfab33",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-02T18:48:56.350898+00:00",
      "summary": "optus.com.au: mx_records changed",
      "old_value": [
        "20 mx.emea.email.fireeyecloud.com"
      ],
      "new_value": [
        "20 mx.emea.email.fireeyecloud.com",
        "30 msgprdimsla005.optus.com.au",
        "30 msgprdimsla006.optus.com.au",
        "30 msgprdimsla007.optus.com.au",
        "30 msgprdimsla008.optus.com.au",
        "30 msgprdimsla009.optus.com.au",
        "30 msgprdimsla010.optus.com.au"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dd82e4dc-c8f6-4b8d-94b1-a0156cb6f22a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "58ffd291-8636-4380-b784-0877e4a788b7",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-02T18:46:30.267209+00:00",
      "summary": "servicesaustralia.gov.au: mx_records changed",
      "old_value": [],
      "new_value": [
        "10 servicesaustralia-gov-au.mail.protection.outlook.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a9d784aa-076a-4f6c-9725-813c9bd06a52",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dfcbdd7b-b907-4471-91f7-2cc89fb1d199",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:48:18.792813+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "173.223.0.97"
      ],
      "new_value": [
        "23.61.212.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c6ee2650-b790-47e5-9368-dfd52936364c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "861d61a7-9f8e-4134-a4f4-d190daa18a00",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:26.984291+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "184.29.91.231"
      ],
      "new_value": [
        "23.37.18.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "28e985eb-6e2f-49bb-a3be-aee2e9700734",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "43021c59-490f-4b60-96d1-c373d6c45abf",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:49:31.417141+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "184.29.91.199"
      ],
      "new_value": [
        "23.222.197.206"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "578ff959-ba81-4421-b67d-dbfaae33d9b8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fdd3d429-d87e-4417-b709-f0588882f8e8",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:48:20.050527+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:3c00:2:88:1b80:93a1",
        "2600:9000:2348:5800:2:88:1b80:93a1",
        "2600:9000:2348:8a00:2:88:1b80:93a1",
        "2600:9000:2348:9200:2:88:1b80:93a1",
        "2600:9000:2348:9a00:2:88:1b80:93a1",
        "2600:9000:2348:ae00:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2200:2:88:1b80:93a1",
        "2600:9000:2348:4400:2:88:1b80:93a1",
        "2600:9000:2348:4e00:2:88:1b80:93a1",
        "2600:9000:2348:600:2:88:1b80:93a1",
        "2600:9000:2348:7c00:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:ca00:2:88:1b80:93a1",
        "2600:9000:2348:cc00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "747a49fa-619c-4d00-bec8-659b82eedb42",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b157e211-cc92-4b05-a3ff-91600460e0ff",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:50:46.672848+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "13.224.187.31",
        "13.224.187.41",
        "13.224.187.45",
        "13.224.187.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d0c06880-49cc-4b82-be99-ce332557d174",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c9f7aed5-605a-40d9-88ac-3b293251dc60",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:47:54.765038+00:00",
      "summary": "crikey.com.au: a_records changed",
      "old_value": [
        "192.0.66.192"
      ],
      "new_value": [
        "192.0.66.136"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e555e1cb-d6f5-4261-b10f-e041a1798aab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "73575144-6670-4478-9d7b-2b8dd4c9ed5a",
      "domain": "crikey.com.au",
      "domain_id": "18b67bd1-d132-4aac-b7bb-82d25116cf3b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:47:56.377687+00:00",
      "summary": "crikey.com.au: aaaa_records changed",
      "old_value": [
        "2a04:fa87:fffd::c000:42e3"
      ],
      "new_value": [
        "2a04:fa87:fffd::c000:4247"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e555e1cb-d6f5-4261-b10f-e041a1798aab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "18838c06-c450-4936-939c-4116846a7208",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:48:52.294368+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "new_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2a32dacc-a8c7-47b8-888a-ced3bb963677",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b2a93cfb-f5c0-4491-b022-f7cc33942845",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:49:23.007439+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.223.241.141",
        "23.223.241.150"
      ],
      "new_value": [
        "23.212.251.68",
        "23.212.251.69"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "156c9ff4-0bd2-4b41-8870-1dd58db05c25",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "eecea418-a2dd-4c44-99e4-cbe41c9730de",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:49:23.750571+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:15::1726:6db0",
        "2600:1418:a000:15::1726:6db1"
      ],
      "new_value": [
        "2600:1408:ec00:10::1730:cb0d",
        "2600:1408:ec00:10::1730:cb0e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "156c9ff4-0bd2-4b41-8870-1dd58db05c25",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "94ed027a-e83f-400d-bec4-9cb4804ffd2a",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:45:58.083700+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.222.17.68",
        "23.222.17.74"
      ],
      "new_value": [
        "23.211.139.204",
        "23.211.139.207"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "47593fac-1a4f-426f-a15b-7e4650cf6fc4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "72251082-ae87-4b7e-804b-6839c871140b",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:45:58.405394+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2a02:26f0:3780:18::5f65:74cb",
        "2a02:26f0:3780:18::5f65:74cf"
      ],
      "new_value": [
        "2600:1406:3a00:33::170b:cfe4",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "47593fac-1a4f-426f-a15b-7e4650cf6fc4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4c16dbad-7ec8-42ed-bd48-c2d0eb8ab198",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:05.358513+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.200.156.17",
        "23.200.156.21"
      ],
      "new_value": [
        "23.211.139.197",
        "23.211.139.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "446f1733-f504-4b10-b13c-868be7ebbe0b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f214202c-5eb5-4502-a4b4-92e36744eb54",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-01T19:14:02.541919+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:b82::ebe",
        "2600:1405:7400:b84::ebe",
        "2600:1405:7400:b8b::ebe",
        "2600:1405:7400:b8c::ebe",
        "2600:1405:7400:b8d::ebe"
      ],
      "new_value": [
        "2600:1418:a000:586::ebe",
        "2600:1418:a000:589::ebe",
        "2600:1418:a000:599::ebe",
        "2600:1418:a000:5ae::ebe",
        "2600:1418:a000:5b4::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1e1be393-67d2-4e05-bb44-108960b48518",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "10280047-d5c1-4c6f-b432-9b1fbb95db8f",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:50:53.436911+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.61.2.166"
      ],
      "new_value": [
        "23.221.240.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b26c2f1a-2675-478e-a44d-623ba85f2bd2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c39db481-92c9-4226-b358-2246db3459b3",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:50:53.719567+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:586::ebe",
        "2600:1418:a000:589::ebe",
        "2600:1418:a000:599::ebe",
        "2600:1418:a000:5ae::ebe",
        "2600:1418:a000:5b4::ebe"
      ],
      "new_value": [
        "2600:1408:c400:985::ebe",
        "2600:1408:c400:987::ebe",
        "2600:1408:c400:98e::ebe",
        "2600:1408:c400:991::ebe",
        "2600:1408:c400:992::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b26c2f1a-2675-478e-a44d-623ba85f2bd2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b68f4fe8-87fa-416d-917f-3b488a920f97",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:47:30.440562+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.56.124.203"
      ],
      "new_value": [
        "23.203.238.223"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1c301ed5-04e7-47c0-b0ec-73869a22069d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a0f94cce-ef75-4ee4-9eff-259ced9720b2",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:52.958866+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fcbf1eb6-e5e0-4a7b-a667-7b648c8ee818",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "14c20bc9-ad06-4569-86cd-61d9ffcfc8bd",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:48:55.994663+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.48.247.241",
        "23.48.247.245"
      ],
      "new_value": [
        "23.55.242.146",
        "23.55.242.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dd82e4dc-c8f6-4b8d-94b1-a0156cb6f22a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f92bbd4e-d437-4b88-b6e7-2d98a2576542",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:30.501724+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "new_value": [
        "18.155.192.106",
        "18.155.192.118",
        "18.155.192.129",
        "18.155.192.54"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "bcb974a2-38ea-407e-ac15-52685ed67071",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "564f43a2-56c8-4945-a151-b1479ba2072f",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:42.535449+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.219.89.18",
        "23.219.89.22"
      ],
      "new_value": [
        "23.212.62.234",
        "23.212.62.238"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "53327842-1b8e-4a7f-b5ad-9c287aa88429",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a2f54eeb-cacd-468e-ad3f-531771f6cb2f",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:46:42.794312+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1407:3c00:1874::17d2:f4c5",
        "2600:1407:3c00:1874::17d2:f4d8"
      ],
      "new_value": [
        "2600:1409:3c00:1a::173b:582c",
        "2600:1409:3c00:1a::173b:582e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "53327842-1b8e-4a7f-b5ad-9c287aa88429",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b6d05ded-3e6b-4cd4-87cc-493fdf0db925",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:38.195256+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.212.62.202",
        "23.212.62.205"
      ],
      "new_value": [
        "23.222.17.14",
        "23.222.17.15"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4c896010-1251-45d6-96d0-fddf50ddcf3f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a1a7248f-8dcd-418e-a243-dd3b5a3978a0",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:46:38.439579+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:3a00:33::170b:cfe7",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "new_value": [
        "2600:140a:5000:13::17de:11c5",
        "2600:140a:5000:13::17de:11ce"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4c896010-1251-45d6-96d0-fddf50ddcf3f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "165aa3d7-1ae8-4a67-a483-28d00b188325",
      "domain": "servicesaustralia.gov.au",
      "domain_id": "7587cc0e-7cc2-4954-8f7e-82c9664ec0b4",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:46:30.012439+00:00",
      "summary": "servicesaustralia.gov.au: a_records changed",
      "old_value": [],
      "new_value": [
        "13.236.242.190",
        "54.206.239.18",
        "54.252.75.26"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a9d784aa-076a-4f6c-9725-813c9bd06a52",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "25293ba0-dcc8-4bba-a64f-26d3d93a8add",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:50:04.438995+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "new_value": [
        "23.222.241.138",
        "23.222.241.144"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e24cd1cc-68e3-41c9-beb7-b80aef364e44",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "215c6479-f685-4458-a606-9996b5418f08",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:49:55.292008+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "184.29.90.166"
      ],
      "new_value": [
        "23.222.196.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "74d9ecae-a81d-41e1-b177-9d7a8a28f70d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "463187b8-c07a-4342-896f-3ef4af936dee",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-02T18:49:56.556343+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:488::ebe",
        "2600:1418:a000:48a::ebe",
        "2600:1418:a000:48f::ebe",
        "2600:1418:a000:4af::ebe",
        "2600:1418:a000:4b8::ebe"
      ],
      "new_value": [
        "2600:1408:c400:981::ebe",
        "2600:1408:c400:989::ebe",
        "2600:1408:c400:98b::ebe",
        "2600:1408:c400:990::ebe",
        "2600:1408:c400:997::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "74d9ecae-a81d-41e1-b177-9d7a8a28f70d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a22732f-b060-4228-b2c6-b9dbfddd64eb",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:49:44.061783+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e2edc9bb-7c68-4263-a894-a66191046659",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7f7d02d4-fe3b-45b0-8395-e55c6cc538c5",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:48:40.443044+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "184.29.91.199"
      ],
      "new_value": [
        "23.222.205.182"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1ed6fe95-022e-48f2-8acd-6e38ceb28f22",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c97753ee-23f4-40eb-bdec-e14a08d4d3dd",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-02T18:49:12.873101+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.67.33.26",
        "23.67.33.37"
      ],
      "new_value": [
        "23.212.62.206",
        "23.212.62.214"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d49046ad-2d1e-4618-bcd6-143140b77c17",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}