{
  "run_date": "2026-08-28",
  "events": [
    {
      "id": "065a0627-44f5-4791-bc03-1af01c04e376",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-28T01:30:41.427966+00:00",
      "summary": "beyondblue.org.au: nameservers changed",
      "old_value": [
        "ns0.telstra.net",
        "ns1.telstra.net"
      ],
      "new_value": [
        "dns1.cscdns.net",
        "dns2.cscdns.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "35acb98c-95c3-4e25-b43d-1f74c2e1b21b",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-08-28T01:34:06.118867+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "1b0f2941-8bb9-4ec4-b604-15e7fbef2e08",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ee00a586-624f-4a96-aa52-46c4a1ed92eb",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-08-28T01:30:41.991417+00:00",
      "summary": "beyondblue.org.au: nameserver and DNS provider changed together",
      "old_value": {
        "nameservers": [
          "ns0.telstra.net",
          "ns1.telstra.net"
        ],
        "dns_provider": "Telstra"
      },
      "new_value": {
        "nameservers": [
          "dns1.cscdns.net",
          "dns2.cscdns.net"
        ],
        "dns_provider": "CSC / Enterprise DNS"
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7479f873-0b52-4e62-bf5f-9abbe729c532",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-08-28T01:30:41.714415+00:00",
      "summary": "beyondblue.org.au: dns_provider changed",
      "old_value": "Telstra",
      "new_value": "CSC / Enterprise DNS",
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "12bf4f02-2ed7-40cd-b338-0a68899cc96a",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ba2ca416-7771-48bd-ba24-335ab3299f8d",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:31:19.888111+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "184.29.30.133"
      ],
      "new_value": [
        "23.45.136.113"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b2dd3434-df72-4c1a-b783-e639867f6401",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a22c6f24-7f5c-47b8-9c88-cba3ab6e505f",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:29:21.652980+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.61.3.235"
      ],
      "new_value": [
        "23.221.254.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "beacb923-5dd9-42d6-ad8a-4dbef8c63083",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e742366c-00e0-43cf-8dd4-aa80537081ee",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:05.049248+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "3.175.34.33",
        "3.175.34.37",
        "3.175.34.65",
        "3.175.34.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13dafade-f333-4182-91f3-af4a8631f947",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f4f3a216-6614-45d1-b21e-a4c9600817c6",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:34.990364+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "23.35.29.187"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5278249f-bb26-4bfe-9e3b-c9b830b08ab1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3fa3b97c-1e8a-4bc0-a77e-66d064125671",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:31:20.484992+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2400:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:7a00:2:88:1b80:93a1",
        "2600:9000:2348:b800:2:88:1b80:93a1",
        "2600:9000:2348:ce00:2:88:1b80:93a1",
        "2600:9000:2348:ea00:2:88:1b80:93a1",
        "2600:9000:2348:f200:2:88:1b80:93a1",
        "2600:9000:2348:fc00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1000:2:88:1b80:93a1",
        "2600:9000:2348:3000:2:88:1b80:93a1",
        "2600:9000:2348:4800:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:5a00:2:88:1b80:93a1",
        "2600:9000:2348:7200:2:88:1b80:93a1",
        "2600:9000:2348:9e00:2:88:1b80:93a1",
        "2600:9000:2348:a200:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "30bcfedb-51d9-45b7-91a1-d6535c77a538",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4b7c618d-41a0-4fb0-8980-66424cd42d32",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-27T20:02:54.257239+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.169.183.116",
        "3.169.183.17",
        "3.169.183.43",
        "3.169.183.56"
      ],
      "new_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0571fd92-ea50-4cd6-8b75-5c9a694f953f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0a1f7573-1057-42b3-89b5-5524bfd231a4",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:33:51.946213+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "new_value": [
        "3.169.183.116",
        "3.169.183.17",
        "3.169.183.43",
        "3.169.183.56"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fe3eeab9-370d-4983-ab2f-444bc3c649a8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "03b17448-fd32-4189-ae9f-5009e2c7ff90",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:31:51.716137+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "new_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5a0b6c07-2dc5-4203-b673-16d847456a29",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8549146d-b1a4-4e51-aedc-78f3c454b8d8",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:27.219055+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.212.62.202",
        "23.212.62.210"
      ],
      "new_value": [
        "23.48.104.150",
        "23.48.104.155"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d9f952b8-a0d8-4711-bfa4-afcf93bd4dad",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c5575690-6c59-43ce-8801-02a1a4d45785",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:32:27.423859+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:29::45c0:8b63",
        "2600:1406:2e00:29::45c0:8b67"
      ],
      "new_value": [
        "2600:1408:ec00:10::1730:cb09",
        "2600:1408:ec00:10::1730:cb0e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d9f952b8-a0d8-4711-bfa4-afcf93bd4dad",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8a1d29de-edbe-4efd-b41f-43b6ea41c043",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:28:52.451671+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.219.89.145",
        "23.219.89.147"
      ],
      "new_value": [
        "23.48.203.106",
        "23.48.203.108"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "37dd0546-3fd7-44fe-a278-37e41c66d3ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bb3c8c34-8b44-4c87-865a-39a6ec6e1ee5",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:28:52.739293+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1407:e800:5d::215:9e7",
        "2600:1407:e800:5d::215:9ee"
      ],
      "new_value": [
        "2600:1408:ec00:2e::1735:bac",
        "2600:1408:ec00:2e::1735:bb0"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "37dd0546-3fd7-44fe-a278-37e41c66d3ab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "72343ea9-5835-4400-a759-615473e3ff9d",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:28:59.566295+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.193.200.147",
        "23.193.200.168"
      ],
      "new_value": [
        "23.48.203.145",
        "23.48.203.146"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f7fa614a-026a-4ea4-b07e-cf03c74e0930",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5b25bf02-3c00-49bf-a123-c6392e04779d",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:34:06.342413+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "23.34.124.164"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1b0f2941-8bb9-4ec4-b604-15e7fbef2e08",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9516b97a-f021-4bd7-892c-9f296f237dcb",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:34:06.565512+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:787::ebe",
        "2600:1406:2e00:791::ebe",
        "2600:1406:2e00:798::ebe",
        "2600:1406:2e00:79c::ebe",
        "2600:1406:2e00:79d::ebe"
      ],
      "new_value": [
        "2600:1408:c400:987::ebe",
        "2600:1408:c400:989::ebe",
        "2600:1408:c400:98f::ebe",
        "2600:1408:c400:991::ebe",
        "2600:1408:c400:992::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1b0f2941-8bb9-4ec4-b604-15e7fbef2e08",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b21edf15-707b-403a-bb6e-b13007749d7c",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:30:30.300373+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.49.137.101"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "102bc1da-bf28-47fb-bd99-bec566c61daf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "051ce5a9-48cb-4b01-aa76-67512e3e7033",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:29:54.393836+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "new_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a6650149-69c6-4e3b-b784-23f0811ed5f8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9d91a8bc-4239-402b-becd-47a3baf3762c",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:29:26.130384+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cdeef35b-f837-4b37-8b01-e044aeaf2724",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d553d905-79c8-4118-bdb9-d3ecc82c998a",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:29:40.096161+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.221.22.36",
        "23.221.22.55"
      ],
      "new_value": [
        "23.12.147.134",
        "23.12.147.158"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0e014437-1e34-4efd-93b3-82a6f52bed1d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bd794b22-ecb1-47e6-a1c5-23bd9d6c4914",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:29:40.726224+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8ac"
      ],
      "new_value": [
        "2600:1408:c400:16::17d4:f80a",
        "2600:1408:c400:16::17d4:f818"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0e014437-1e34-4efd-93b3-82a6f52bed1d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0be291e9-2a02-4d7c-b086-492539b4a818",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:29:39.500493+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.43.51.137",
        "23.43.51.139"
      ],
      "new_value": [
        "23.53.11.136",
        "23.53.11.139"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "18364ef5-4006-4cf8-bb70-9261f68079aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "762ab85b-2731-4f9b-b22e-3eb01dae2779",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:29:40.131545+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:bc00:61::addf:eacf",
        "2600:1406:bc00:61::addf:ead3"
      ],
      "new_value": [
        "2600:1408:ec00:2e::1735:ba8",
        "2600:1408:ec00:2e::1735:bae"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "18364ef5-4006-4cf8-bb70-9261f68079aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "71311d10-fb4c-4296-b654-4e8cef603bf6",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:33:33.620598+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4af10ca9-fad6-4181-9500-187b775ea3b0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a7ebd402-8183-4301-9f01-61960da29eb9",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:33:12.886367+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.59.88.229",
        "23.59.88.241"
      ],
      "new_value": [
        "23.62.46.10",
        "23.62.46.22"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "962117fd-acc4-42df-b2b1-355e8171120f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d860360a-8508-4586-b9fe-1fa0b11d9bf1",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:58.182538+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "23.34.124.164"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "be09e81a-797a-497c-b32b-b279dbd8f7d5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "44843101-6618-4bc9-b546-ee947ac7bdd0",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-08-28T01:32:58.400172+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:78d::ebe",
        "2600:1406:2e00:793::ebe",
        "2600:1406:2e00:795::ebe",
        "2600:1406:2e00:797::ebe",
        "2600:1406:2e00:7a5::ebe"
      ],
      "new_value": [
        "2600:1408:c400:581::ebe",
        "2600:1408:c400:588::ebe",
        "2600:1408:c400:589::ebe",
        "2600:1408:c400:590::ebe",
        "2600:1408:c400:594::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "be09e81a-797a-497c-b32b-b279dbd8f7d5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "894ec5e9-f43f-416e-8e36-15643438849e",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:48.394175+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5964ceb8-1c10-460e-8899-a50fbff5d7c1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "48249946-38bc-42bf-b02a-3595cb4dca75",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:31:40.580950+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "184.31.113.204"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4edbf45f-b6e4-4a09-afcc-727c4ec7806b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "47f7abd3-a1a9-4725-822f-96ff1ee6b3cd",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-08-28T01:32:19.263635+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.202.230.202",
        "23.202.230.213"
      ],
      "new_value": [
        "23.41.4.85",
        "23.41.4.89"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6e97ef8c-4c91-45a5-b267-7766360e2155",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}