{
  "run_date": "2026-09-24",
  "events": [
    {
      "id": "4ac05a0d-7e7a-4259-bf5a-f9a2375eb836",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-23T20:20:56.548363+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "e827b484-aab4-4615-8df6-125d608171bf",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "144f128f-4e29-47b4-a1eb-bc3371301bda",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:21:40.320646+00:00",
      "summary": "auspost.com.au: rdap_status changed",
      "old_value": [
        "client delete prohibited",
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "client delete prohibited",
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "6f2cbd54-652f-4f6a-8961-1eff083d35a9",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "39cb90af-3d44-4874-93f6-b647dc5bbd7a",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:22:27.963074+00:00",
      "summary": "medibank.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "84bde4c8-a5a6-46cd-9f75-42334a7eccbd",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "deb3d643-bbfc-4e75-ba88-e9c9dd21b6a5",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:19:54.089753+00:00",
      "summary": "nrma.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "c52ab53b-d8fb-447b-9d91-91cbe5cbafef",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "cd35f81b-8d2a-4981-819a-7f4f0a1ef99b",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:21:31.935434+00:00",
      "summary": "optus.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "58dcf4d7-ecf5-418a-9d51-606fdfc64d84",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "704d03ad-7433-495f-a523-b9bd3184b525",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:23:20.506732+00:00",
      "summary": "reece.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "8a5dea74-7c32-4aed-83ae-2514fc4dad3d",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a4d39192-0ecb-4b60-9f3a-bde211aae931",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:22:58.540478+00:00",
      "summary": "target.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "66bceef5-3417-4e36-8add-0240de94024f",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "adcf4625-4738-4f2b-a6ea-c55de5f2eacb",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-23T20:22:43.381087+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "96913481-007b-48a3-ba8c-55d15202bcb2",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "01013173-cc9b-48ef-8a33-ed4ff04e7221",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-23T20:21:12.346572+00:00",
      "summary": "woolworths.com.au: rdap_status changed",
      "old_value": [
        "active"
      ],
      "new_value": [
        "renew period",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "b450e5f6-21e5-40c0-950e-3f7a498d822e",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "1efe8715-747f-4518-a432-f4a9724503c3",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:20:49.444785+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "184.29.110.140"
      ],
      "new_value": [
        "23.62.176.97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "013faaab-ca65-4fb5-ac7a-2693ee6fe03b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a03ac2e-b045-462a-a263-0ef1509d19b5",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:18:39.325258+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.222.206.184"
      ],
      "new_value": [
        "23.37.18.130"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c1d872cf-1ae4-490e-9827-f5db45396cb2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c553de30-c8ec-4fe1-af98-3cafe74d022f",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:21:39.717052+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6f2cbd54-652f-4f6a-8961-1eff083d35a9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2bc6c3fd-8f6b-453f-a2fc-2a5185f5e42d",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:22:18.463120+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.61.209.163"
      ],
      "new_value": [
        "23.48.9.159"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ce58312e-155a-480a-bc7b-cf22e14fd0fd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0c792d29-6265-4b73-84ba-a37e6130e712",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:20:47.190877+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:0:2:88:1b80:93a1",
        "2600:9000:2348:2600:2:88:1b80:93a1",
        "2600:9000:2348:3e00:2:88:1b80:93a1",
        "2600:9000:2348:400:2:88:1b80:93a1",
        "2600:9000:2348:7400:2:88:1b80:93a1",
        "2600:9000:2348:8c00:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:3000:2:88:1b80:93a1",
        "2600:9000:2348:6600:2:88:1b80:93a1",
        "2600:9000:2348:7c00:2:88:1b80:93a1",
        "2600:9000:2348:8800:2:88:1b80:93a1",
        "2600:9000:2348:c800:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1",
        "2600:9000:2348:e200:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fca82b4b-2fa5-41f9-82f7-7518ae900527",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f3e3d38a-12f4-4b06-8f7e-6231cdd4fd8b",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-22T20:16:26.444428+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a48d2b7-a744-4de4-9be2-8cf680dd7a2a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f9db9e69-30ba-4912-aa96-046ea7499084",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:23:42.144202+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7301fb3e-877d-421c-9344-3fee4d9b4d47",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "adb528b7-ae92-4509-9e81-9e68aed7e252",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:21:26.015442+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "new_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "06344729-f727-4ebd-bbce-a9faa5aa9ce5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fd8189d8-423d-40a6-918b-2df815f55e9c",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:22:09.187174+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.62.226.171",
        "23.62.226.174"
      ],
      "new_value": [
        "23.48.203.169",
        "23.48.203.178"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "27a19872-c956-488c-9172-8ec959cd0634",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ae63103b-f21c-4649-bdb1-04d9c5aea0ba",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:22:09.421326+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "new_value": [
        "2600:1408:ec00:b::1730:cba9",
        "2600:1408:ec00:b::1730:cbb2"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "27a19872-c956-488c-9172-8ec959cd0634",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3bcfcb4f-3e9b-4d85-9624-c9e81eac7325",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:18:05.916719+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "173.223.234.200",
        "173.223.234.205"
      ],
      "new_value": [
        "23.211.139.204",
        "23.211.139.207"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae7061ad-e927-46a0-92f1-d13b60e950c5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e592dc0e-5bb4-4907-8618-da0ddcd668d4",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:18:06.251973+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:bc00:26::1723:1a16",
        "2600:1406:bc00:26::1723:1a1f"
      ],
      "new_value": [
        "2600:1406:2e00:49::172e:d8c7",
        "2600:1406:2e00:49::172e:d8d0"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae7061ad-e927-46a0-92f1-d13b60e950c5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "655cee2a-b7ef-463b-a461-8c604c7cbf33",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:18:15.585428+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "173.223.234.140",
        "173.223.234.142"
      ],
      "new_value": [
        "23.11.207.228",
        "23.11.207.236"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1310e6a0-92a6-4489-b321-5a7b99ee862d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "91d1e398-dbf9-4751-b57d-c98affbadbc9",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:23:50.060705+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.61.208.154"
      ],
      "new_value": [
        "23.48.8.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "76f13c8a-1b03-46e3-bdaa-d55f592db9bb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2fbc58f7-4444-48f7-a3da-65c5beb0c408",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:23:50.700703+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:580::ebe",
        "2600:1405:8400:583::ebe",
        "2600:1405:8400:584::ebe",
        "2600:1405:8400:58b::ebe",
        "2600:1405:8400:58c::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:280::ebe",
        "2600:1408:ec00:287::ebe",
        "2600:1408:ec00:288::ebe",
        "2600:1408:ec00:289::ebe",
        "2600:1408:ec00:2a1::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "76f13c8a-1b03-46e3-bdaa-d55f592db9bb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0979b9e9-b61f-40b4-b928-fd764733f3d9",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:19:53.452108+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.61.99.153"
      ],
      "new_value": [
        "23.49.178.193"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c52ab53b-d8fb-447b-9d91-91cbe5cbafef",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3ab52b8b-ee07-4e5a-be12-99ee96f3e84e",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:19:17.164298+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "new_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "76ab3d96-9817-4d5f-b29c-1797135e0033",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "476093f9-5d63-41c7-9d0b-9278ffc1bbcd",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:21:31.640255+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.33.238.100",
        "23.33.238.114"
      ],
      "new_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "58dcf4d7-ecf5-418a-9d51-606fdfc64d84",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ad049c54-cc04-462b-869c-e35fc9eef2df",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:18:44.230563+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.238.96.120",
        "18.238.96.122",
        "18.238.96.13",
        "18.238.96.64"
      ],
      "new_value": [
        "18.238.192.101",
        "18.238.192.22",
        "18.238.192.47",
        "18.238.192.84"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5c96a4a0-0382-40ce-ac7b-4d8b288b4e63",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ed1619cd-7c6e-4d7c-8abf-e4c3d55be159",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:18:59.373437+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.209.84.149",
        "23.209.84.150"
      ],
      "new_value": [
        "23.211.139.201",
        "23.211.139.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "21b0356b-3154-4894-aa0a-e59cac2ee285",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "378450e6-f256-4c4f-8df3-e5f9dd57e7e0",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:18:59.664515+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:8::17d1:5495",
        "2600:1405:8400:8::17d1:5496"
      ],
      "new_value": [
        "2600:1406:2e00:49::172e:d8c9",
        "2600:1406:2e00:49::172e:d8cb"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "21b0356b-3154-4894-aa0a-e59cac2ee285",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2bac6658-8944-4722-993f-6a645980aa13",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:19:00.432987+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.48.104.138",
        "23.48.104.139"
      ],
      "new_value": [
        "23.34.62.163",
        "23.34.62.175"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "83bc999a-1df0-47ab-be9d-8f7f96581ddc",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bbaa177b-d965-4f9f-ba48-b986a564b069",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:19:00.721124+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:c400:11::17cd:6b50",
        "2600:1408:c400:11::17cd:6b56"
      ],
      "new_value": [
        "2600:1406:bc00:61::addf:eaca",
        "2600:1406:bc00:61::addf:eacf"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "83bc999a-1df0-47ab-be9d-8f7f96581ddc",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0b9a928c-4ff0-44c1-ad54-e100a626afcc",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:23:20.245486+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "52.85.132.114",
        "52.85.132.26",
        "52.85.132.42",
        "52.85.132.78"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8a5dea74-7c32-4aed-83ae-2514fc4dad3d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e1699029-aea4-4c76-b311-fe6abfeba8e4",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:22:58.228793+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.220.103.73",
        "23.220.103.89"
      ],
      "new_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "66bceef5-3417-4e36-8add-0240de94024f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b1af2834-87cd-4ed6-9e02-fad35c1a6be4",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:22:48.773355+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.61.208.154"
      ],
      "new_value": [
        "23.48.8.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "700eac3c-f019-4036-8081-e19606c89288",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c714f891-c0a1-4dd6-a6b5-3fede1bbb768",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:22:49.399998+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:35:182::ebe",
        "2600:1406:35:184::ebe",
        "2600:1406:35:187::ebe",
        "2600:1406:35:189::ebe",
        "2600:1406:35:193::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:284::ebe",
        "2600:1408:ec00:287::ebe",
        "2600:1408:ec00:288::ebe",
        "2600:1408:ec00:289::ebe",
        "2600:1408:ec00:2a1::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "700eac3c-f019-4036-8081-e19606c89288",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4f39d163-cb5f-4446-a65d-e062ce8cf16e",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:22:32.806215+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "65.8.20.119",
        "65.8.20.123",
        "65.8.20.125",
        "65.8.20.66"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "39a68301-7c8a-456b-946c-f5400de0d130",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b46ab549-fea5-4aa8-b624-cb5c6fa2d1b9",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:21:12.051354+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.61.3.203"
      ],
      "new_value": [
        "23.61.209.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b450e5f6-21e5-40c0-950e-3f7a498d822e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "071aa29a-bc71-4127-a365-60bc04844995",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-23T20:21:55.618332+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.200.156.24",
        "23.200.156.4"
      ],
      "new_value": [
        "23.48.104.57",
        "23.55.176.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b12065ef-25d6-40be-bae8-71bcd4bce05e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}