{
  "run_date": "2026-09-25",
  "events": [
    {
      "id": "88facd39-c3dc-4add-a73b-a5e73c3f5438",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-24T20:30:24.918311+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "526cb32e-4c57-4faf-b241-d288176d47af",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "2d401ceb-ce2f-4589-85a8-9928d74c31b8",
      "domain": "commbank.com.au",
      "domain_id": "bb70a37e-919b-454d-9417-d6eb2fcf0e24",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-24T20:29:12.769743+00:00",
      "summary": "commbank.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "c9269418-2f05-4ddd-9386-957170d08dc9",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "0931d64a-b8b3-47ef-9412-518b4784864d",
      "domain": "iag.com.au",
      "domain_id": "27632308-d381-4f44-9eb9-02664f075406",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-24T20:28:21.110171+00:00",
      "summary": "iag.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "ea23dea1-8f4f-488c-ab05-d0e37948289d",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7a43e9da-1319-4dd9-8551-00358864f2bc",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-24T20:27:33.519744+00:00",
      "summary": "kmart.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "581969ac-1f96-4dc9-b6cb-c37922d1de7e",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "57637afe-e2f1-42e4-8634-f7f1e9cdbc78",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-24T20:28:57.687610+00:00",
      "summary": "realestate.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "e72fe797-6e84-4cb3-abaf-d03deb8ee755",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "12fd3b53-9f21-4b66-8b99-b0d38d053d50",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-24T20:32:15.751458+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "13852894-96b9-4fa3-9d4c-a83a0d012e4e",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f5359eb9-1fd0-4665-9c5c-9eb288a13401",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:30:55.034249+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.62.176.97"
      ],
      "new_value": [
        "184.29.30.133"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "38b7e6cc-7c4f-4307-aec2-0542f1adb248",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c1031d0a-fa86-4fc1-a1ba-941af7b95af6",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:28:03.053359+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.37.18.130"
      ],
      "new_value": [
        "23.220.129.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b6077fb-e4e0-46e3-a7b4-71afa23a4c1b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5763e369-1973-44af-a075-c8dc38fb5827",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:02.442920+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "18.155.173.11",
        "18.155.173.23",
        "18.155.173.74",
        "18.155.173.85"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cae4e316-50d5-4142-9bf0-ff22f5bcfb81",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4e30553a-ed07-498b-84aa-8c3e117670e5",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:54.466622+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.48.9.159"
      ],
      "new_value": [
        "23.214.125.97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "83c4c560-200c-467f-980a-2083f6def866",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3725eda5-58e4-4015-9715-29fa6c779034",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:30:18.257167+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:3000:2:88:1b80:93a1",
        "2600:9000:2348:6600:2:88:1b80:93a1",
        "2600:9000:2348:7c00:2:88:1b80:93a1",
        "2600:9000:2348:8800:2:88:1b80:93a1",
        "2600:9000:2348:c800:2:88:1b80:93a1",
        "2600:9000:2348:d200:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1",
        "2600:9000:2348:e200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1000:2:88:1b80:93a1",
        "2600:9000:2348:3600:2:88:1b80:93a1",
        "2600:9000:2348:3c00:2:88:1b80:93a1",
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:8000:2:88:1b80:93a1",
        "2600:9000:2348:800:2:88:1b80:93a1",
        "2600:9000:2348:b200:2:88:1b80:93a1",
        "2600:9000:2348:de00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "331019f2-846b-4d6b-b500-a77aa3b04676",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e33a25c8-0fe3-4012-8f81-b0d95ee97548",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:33.707180+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "new_value": [
        "52.222.205.11",
        "52.222.205.113",
        "52.222.205.80",
        "52.222.205.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2143a6ad-7b76-4028-b361-9293628186a2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f736bf85-f707-4a65-a41f-15db9d5506fd",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:45.637821+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.48.203.169",
        "23.48.203.178"
      ],
      "new_value": [
        "23.215.11.241",
        "23.215.11.243"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c03837ef-6b59-4642-9b89-48ae6a81a178",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0df6d2db-795e-48de-ae7d-9fbbbd45807c",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:31:45.937881+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:b::1730:cba9",
        "2600:1408:ec00:b::1730:cbb2"
      ],
      "new_value": [
        "2600:1407:7400:14::17d7:bf1",
        "2600:1407:7400:14::17d7:bf3"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c03837ef-6b59-4642-9b89-48ae6a81a178",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "50aa7ab2-66b7-41f8-b8de-741fc46e1f72",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:27:32.911774+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.211.139.204",
        "23.211.139.207"
      ],
      "new_value": [
        "23.198.214.79",
        "23.198.214.81"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "581969ac-1f96-4dc9-b6cb-c37922d1de7e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0170ed44-0f36-43fd-9d55-ca2f012864f4",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:27:33.247564+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:49::172e:d8c7",
        "2600:1406:2e00:49::172e:d8d0"
      ],
      "new_value": [
        "2600:141b:1c00:27::17ce:ac14",
        "2600:141b:1c00:27::17ce:ac1a"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "581969ac-1f96-4dc9-b6cb-c37922d1de7e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e39d4ab8-ea0c-42c2-becd-f26207e56288",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:27:40.872055+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.11.207.228",
        "23.11.207.236"
      ],
      "new_value": [
        "23.48.203.17",
        "23.48.203.4"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "be5a8085-bca6-48b2-aa86-4f7bc00f8482",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2fbc58f7-4444-48f7-a3da-65c5beb0c408",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-23T20:23:50.700703+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:580::ebe",
        "2600:1405:8400:583::ebe",
        "2600:1405:8400:584::ebe",
        "2600:1405:8400:58b::ebe",
        "2600:1405:8400:58c::ebe"
      ],
      "new_value": [
        "2600:1408:ec00:280::ebe",
        "2600:1408:ec00:287::ebe",
        "2600:1408:ec00:288::ebe",
        "2600:1408:ec00:289::ebe",
        "2600:1408:ec00:2a1::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "76f13c8a-1b03-46e3-bdaa-d55f592db9bb",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7b73bf6b-85a5-4103-ab73-6d93e10058a2",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:33:26.745910+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.48.8.150"
      ],
      "new_value": [
        "184.31.112.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c3224c6d-f193-49cb-afb7-672c27862dab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6be7fbc5-5551-4b99-a983-802f83b6757e",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:33:27.057814+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:280::ebe",
        "2600:1408:ec00:287::ebe",
        "2600:1408:ec00:288::ebe",
        "2600:1408:ec00:289::ebe",
        "2600:1408:ec00:2a1::ebe"
      ],
      "new_value": [
        "2600:1407:3c00:1480::ebe",
        "2600:1407:3c00:1481::ebe",
        "2600:1407:3c00:1484::ebe",
        "2600:1407:3c00:1489::ebe",
        "2600:1407:3c00:1494::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c3224c6d-f193-49cb-afb7-672c27862dab",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fa0c942a-27d3-4df1-a78a-5394418141de",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:29:28.612437+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.52.211.186"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c228bd0c-2996-463b-aa21-490ae4aeabe5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5e6a5653-d5b3-448e-b712-63ac6761c7db",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:29:19.402416+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "89a57f81-15f9-434a-9c4f-07f1709f220b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "de74f585-6233-45bf-ae41-dc198e4df7e4",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:38.907643+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "new_value": [
        "23.219.64.65",
        "23.219.64.66",
        "23.219.64.67",
        "23.219.64.80",
        "23.219.64.82",
        "23.219.64.83",
        "23.219.64.89",
        "23.219.64.97",
        "23.219.64.99"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "82f867ec-0533-4ec1-87ff-520b2dbea7e4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ea26c246-e566-455c-8f92-d4406836155d",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:28:07.626357+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.238.192.101",
        "18.238.192.22",
        "18.238.192.47",
        "18.238.192.84"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3161fec7-7b2b-437b-9768-c05db6db97b2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ebaea2f9-df7c-4818-a988-115c151b439e",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:28:24.679886+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.211.139.201",
        "23.211.139.209"
      ],
      "new_value": [
        "23.212.250.27",
        "23.212.250.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6bc1ad4b-14c7-4703-bf6d-0d73058efda5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a385d706-d8ff-4b2d-966d-ffc297256923",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:28:25.339798+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:49::172e:d8c9",
        "2600:1406:2e00:49::172e:d8cb"
      ],
      "new_value": [
        "2600:1408:c400:c::17cd:6889",
        "2600:1408:c400:c::17cd:6896"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6bc1ad4b-14c7-4703-bf6d-0d73058efda5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "884270c6-5748-4502-ae0a-8503fb9d4a48",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:28:57.091088+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.34.62.163",
        "23.34.62.175"
      ],
      "new_value": [
        "23.198.7.175",
        "23.198.7.179"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e72fe797-6e84-4cb3-abaf-d03deb8ee755",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "21bfacba-a5c8-4678-87bb-06b063f3ae2e",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:28:57.382275+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:bc00:61::addf:eaca",
        "2600:1406:bc00:61::addf:eacf"
      ],
      "new_value": [
        "2600:1404:6400:14::17c6:724",
        "2600:1404:6400:14::17c6:737"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e72fe797-6e84-4cb3-abaf-d03deb8ee755",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "103838d8-9cf1-4ef0-937e-346c9f8d9c14",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:32:53.185644+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "new_value": [
        "3.170.185.119",
        "3.170.185.127",
        "3.170.185.46",
        "3.170.185.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d36a58e6-43f5-4aed-8dfe-739b3b48d8d7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0195b44f-6b63-405f-b553-7d8f0165a36f",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:32:20.324805+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.48.8.150"
      ],
      "new_value": [
        "184.31.112.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "52d5671d-cf3b-4f26-bfeb-2e680fa62aa5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "21761167-776c-4870-a3ab-c1b27691be88",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-24T20:32:20.589317+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:284::ebe",
        "2600:1408:ec00:287::ebe",
        "2600:1408:ec00:288::ebe",
        "2600:1408:ec00:289::ebe",
        "2600:1408:ec00:2a1::ebe"
      ],
      "new_value": [
        "2600:1407:3c00:1482::ebe",
        "2600:1407:3c00:1485::ebe",
        "2600:1407:3c00:1491::ebe",
        "2600:1407:3c00:1492::ebe",
        "2600:1407:3c00:1493::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "52d5671d-cf3b-4f26-bfeb-2e680fa62aa5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dcd7f820-3645-43a1-9ffc-b567b5c71b26",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:32:05.831811+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "new_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "870a8b68-d1f3-4334-95fb-902fdecff7b9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "da89fdfc-e460-423f-ae8c-ebab3234dcca",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:19.860037+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.61.209.163"
      ],
      "new_value": [
        "23.61.3.203"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3172efcf-6371-4a8c-9345-2ba8eb82149c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "369e86c4-f65f-4573-8229-e356b5dff8d3",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-24T20:31:16.728663+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.48.104.57",
        "23.55.176.204"
      ],
      "new_value": [
        "23.43.51.13",
        "23.43.51.6"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "def38dfd-f80e-4776-a726-6fa987ba8307",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}