{
  "run_date": "2026-10-08",
  "events": [
    {
      "id": "797a0237-f00e-49a1-ae6d-ed7a528c5968",
      "domain": "bunnings.com.au",
      "domain_id": "72696d71-a6d9-4b43-8c62-ca84e03cfa05",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "registrar_changed",
      "event_label": "Registrar change",
      "event_time": "2026-10-07T21:58:05.965384+00:00",
      "summary": "bunnings.com.au: registrar changed",
      "old_value": {
        "name": "Melbourne IT",
        "handle": "802255"
      },
      "new_value": {
        "name": "Domain Directors Pty Ltd trading as Instra",
        "handle": "802233"
      },
      "category": "registrar",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "539d3de9-eaa1-44c9-a557-645201b529c5",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "2df20e58-e611-4559-a89b-b08a78bac23f",
      "domain": "bunnings.com.au",
      "domain_id": "72696d71-a6d9-4b43-8c62-ca84e03cfa05",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-10-07T21:58:05.661350+00:00",
      "summary": "bunnings.com.au: rdap_status changed",
      "old_value": [
        "pending transfer"
      ],
      "new_value": [
        "client delete prohibited",
        "transfer period"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "539d3de9-eaa1-44c9-a557-645201b529c5",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "662dfc33-5da3-4fbf-9838-93685b413e1b",
      "domain": "health.gov.au",
      "domain_id": "e777b28a-f8b3-47b3-9f8c-964db7452560",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-10-07T21:58:18.319031+00:00",
      "summary": "health.gov.au: rdap_status changed",
      "old_value": [
        "client delete prohibited",
        "client update prohibited",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "client delete prohibited",
        "client update prohibited",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "0b72ff90-9427-4ebf-87cd-dcdd9216a9db",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "4fcfc7ed-0607-4e42-91cc-8e4a1eff3628",
      "domain": "missionaustralia.com.au",
      "domain_id": "3ecf7362-bf67-4da1-a54d-a0f19a6cc4cf",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-07T22:01:53.463045+00:00",
      "summary": "missionaustralia.com.au: nameservers changed",
      "old_value": [
        "ns1-02.azure-dns.com",
        "ns2-02.azure-dns.net",
        "ns3-02.azure-dns.org",
        "ns4-02.azure-dns.info"
      ],
      "new_value": [
        "ns1-02.azure-dns.com",
        "ns2-02.azure-dns.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "8ffbb506-2720-4797-8715-17b1dda65377",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "25333901-a522-4ba1-b1f9-9abcc64d7219",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-07T22:03:11.626267+00:00",
      "summary": "theaustralian.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "95c2e2c2-066e-4d7d-9594-07e544958046",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "b060c88e-8e93-4d39-8a68-fb9ff0b8286f",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-07T22:03:06.029372+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "76008ee3-9613-4d4b-837c-3ff4ede40265",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "43a18f38-3a8b-4ec1-b61d-6deec2a1a318",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:00:55.695749+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.61.212.130"
      ],
      "new_value": [
        "173.223.0.97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c0ea6438-6abf-4013-aaaa-a444205c6d22",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "67c7b519-d0fc-435a-9ad3-a8fcb219fb2a",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:58:32.596350+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.222.206.184"
      ],
      "new_value": [
        "23.213.45.134"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "15d0da80-ad7d-41af-85bf-dcba6e58082e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3641b72d-2d9b-4f06-af8e-7c88b0a42abc",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:01:47.003479+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "77841dbe-3269-4e02-abc6-1c8a1e154e2e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "44817f14-b1e0-40c4-8e2a-183eb9197b9f",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:02:43.237232+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.48.9.159"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6a1141cb-8d6d-4513-aa8f-c1e61dd111fa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "484ab495-afe5-487b-b563-f0a07d464044",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T22:00:49.058701+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2e00:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:5800:2:88:1b80:93a1",
        "2600:9000:2348:6800:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:b400:2:88:1b80:93a1",
        "2600:9000:2348:b800:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1c00:2:88:1b80:93a1",
        "2600:9000:2348:5e00:2:88:1b80:93a1",
        "2600:9000:2348:8e00:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:a800:2:88:1b80:93a1",
        "2600:9000:2348:aa00:2:88:1b80:93a1",
        "2600:9000:2348:e00:2:88:1b80:93a1",
        "2600:9000:2348:ea00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4a052e73-7fba-4c8b-9221-30b95c56e14d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6e750561-6d0e-4238-945f-da9d488d76cd",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:03:56.683990+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "99.86.77.122",
        "99.86.77.40",
        "99.86.77.62",
        "99.86.77.73"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e363b49d-2aef-4720-882f-1d70b74e8def",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a2b20591-98cb-4ba3-8892-6c7b411e57db",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:01:38.135708+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "18.238.109.106",
        "18.238.109.23",
        "18.238.109.55",
        "18.238.109.98"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7dfa2408-9d63-41df-ade2-d5fc07fc4140",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a88f76a2-faaf-4da8-ae41-53b2612785ab",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:02:27.300506+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.48.203.169",
        "23.48.203.178"
      ],
      "new_value": [
        "23.212.62.202",
        "23.212.62.210"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a57d1cb1-9d80-4396-8ded-1e480f3ea682",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a8056b60-e484-49c4-804e-611282ad7ea5",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T22:02:28.181359+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:35::17ca:e6c8",
        "2600:1408:5400:35::17ca:e6e4"
      ],
      "new_value": [
        "2600:1406:2e00:29::45c0:8b63",
        "2600:1406:2e00:29::45c0:8b67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a57d1cb1-9d80-4396-8ded-1e480f3ea682",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "36d50644-ad59-40f0-98a7-c509e32373f0",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:58:01.228480+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "173.223.234.200",
        "173.223.234.205"
      ],
      "new_value": [
        "23.220.161.72",
        "23.220.161.84"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "40e0d78b-0dac-4660-8b85-9d7e76c9c69d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d92c1a29-e011-462a-b63b-809ec108ba02",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T21:58:01.596599+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:9866",
        "2600:1406:5e00:9c::1720:9872"
      ],
      "new_value": [
        "2600:1404:6400:62::17d3:7f2b",
        "2600:1404:6400:62::17d3:7f3c"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "40e0d78b-0dac-4660-8b85-9d7e76c9c69d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "de6de3f0-eb38-4fd6-9a5e-abb7b3e71487",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:58:09.848306+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.210.216.133",
        "23.210.216.163"
      ],
      "new_value": [
        "23.201.195.47"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5a36ce4c-1ce1-46c0-8748-e62679a97419",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e6bd27ca-e0b8-4305-b236-527ae813eee8",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-06T21:42:44.460224+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:580::ebe",
        "2600:1405:7400:584::ebe",
        "2600:1405:7400:590::ebe",
        "2600:1405:7400:592::ebe",
        "2600:1405:7400:593::ebe"
      ],
      "new_value": [
        "2600:1408:5400:d82::ebe",
        "2600:1408:5400:d8c::ebe",
        "2600:1408:5400:d95::ebe",
        "2600:1408:5400:d96::ebe",
        "2600:1408:5400:d9a::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "361715a6-064a-41cf-8a6e-7fcc5f3f47cf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "187946c5-a68c-4453-a8fd-0631d4c3c297",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:04:09.580906+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.202.152.150"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "63e01636-d02a-4410-acb6-33988b4aefdd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e6c0f87a-00a0-43b0-b45a-984fc4a307b5",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T22:04:09.898211+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:d82::ebe",
        "2600:1408:5400:d8c::ebe",
        "2600:1408:5400:d95::ebe",
        "2600:1408:5400:d96::ebe",
        "2600:1408:5400:d9a::ebe"
      ],
      "new_value": [
        "2600:1406:2e00:781::ebe",
        "2600:1406:2e00:782::ebe",
        "2600:1406:2e00:789::ebe",
        "2600:1406:2e00:78b::ebe",
        "2600:1406:2e00:7a6::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "63e01636-d02a-4410-acb6-33988b4aefdd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2c44736a-1271-4090-8788-377862d90aab",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:59:49.691573+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.194.151.84"
      ],
      "new_value": [
        "23.207.130.176"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "03b8c5c9-d840-4b86-b5b9-7621c432ad59",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "157cfc43-b4bb-4406-a742-2161589de51d",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:59:20.300376+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "new_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "af8d3129-5bb7-4e58-966b-f7ed6f22bdfd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1c5b957f-f022-4679-91b8-c674edf73618",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:01:43.232135+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.219.64.33",
        "23.219.64.34",
        "23.219.64.35",
        "23.219.64.40",
        "23.219.64.41",
        "23.219.64.43",
        "23.219.64.65",
        "23.219.64.66",
        "23.219.64.67"
      ],
      "new_value": [
        "104.72.70.86",
        "104.72.70.90",
        "104.72.70.91",
        "23.55.242.202",
        "23.55.242.210",
        "23.55.242.211",
        "23.55.242.217",
        "23.55.242.218",
        "23.55.242.224"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9ac5ac58-6cbe-45bc-9124-2e8ae3327ac1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d6928515-732b-41b2-887c-e704b9774f58",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:58:37.178339+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "18.238.96.120",
        "18.238.96.122",
        "18.238.96.13",
        "18.238.96.64"
      ],
      "new_value": [
        "52.84.217.13",
        "52.84.217.42",
        "52.84.217.63",
        "52.84.217.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "60598ed0-87ff-40f3-a17a-96c3b0b70a9c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "75285d3d-38e9-454e-af3f-a6f882f1e13d",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:58:50.747142+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.209.84.149",
        "23.209.84.150"
      ],
      "new_value": [
        "23.219.160.16",
        "23.219.160.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d099aa2f-23ef-48dc-9a51-ecb782a6cb94",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c4f507c6-022f-4326-afc4-1bab87e1ff50",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T21:58:51.057190+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:f::173e:e276",
        "2600:1405:8400:f::173e:e278"
      ],
      "new_value": [
        "2600:1404:a00:5::172d:770d",
        "2600:1404:a00:5::172d:771e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d099aa2f-23ef-48dc-9a51-ecb782a6cb94",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "753d10f2-5dfd-49f2-9beb-84b0533ca646",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T21:59:03.706601+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.198.7.175",
        "23.198.7.179"
      ],
      "new_value": [
        "173.223.234.151",
        "173.223.234.155"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e80bcc83-c3e6-448f-9073-07a38a0cc33f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dfa52268-7444-4a08-8e30-81e8f526eb8d",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T21:59:04.005690+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1407:e800:5d::215:9e4",
        "2600:1407:e800:5d::215:9f3"
      ],
      "new_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e80bcc83-c3e6-448f-9073-07a38a0cc33f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8f30a3ad-f2dc-4af6-a5c9-563c1d4d0c05",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:03:43.961103+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "new_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b918c83-0512-489b-a947-ea563d9e1b77",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e29ec4cc-ad78-48ee-8dd8-156bc66c576a",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:03:10.005542+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.64.114.49",
        "23.64.114.56"
      ],
      "new_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b75dda0b-ece8-40a9-9582-80aebcf09d4b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dadba9fc-46d2-4f59-ae7e-5cbb2494001c",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:03:11.915848+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "23.48.8.150"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "95c2e2c2-066e-4d7d-9594-07e544958046",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "fe14fefb-3e8c-4dec-9e2c-7e597aa39972",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T22:03:12.216100+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:d85::ebe",
        "2600:1408:5400:d88::ebe",
        "2600:1408:5400:d9d::ebe",
        "2600:1408:5400:d9e::ebe",
        "2600:1408:5400:d9f::ebe"
      ],
      "new_value": [
        "2600:1404:ec00:1284::ebe",
        "2600:1404:ec00:1288::ebe",
        "2600:1404:ec00:128c::ebe",
        "2600:1404:ec00:128f::ebe",
        "2600:1404:ec00:1294::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "95c2e2c2-066e-4d7d-9594-07e544958046",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0aa11e62-247e-4d43-877b-b82eb6c8040b",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:02:57.690524+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "new_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3d99719f-3b45-4aef-a7b3-ee28bc7f0dec",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "21bf94a0-5ab0-4373-bb6b-775add80c3cc",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:01:22.311919+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.61.209.163"
      ],
      "new_value": [
        "184.31.113.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "35c31798-0e50-4f06-a0fe-bafae5afc61e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ab79feb6-74f4-4068-8f31-aa572fab41ae",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-07T22:02:02.361573+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.213.186.200",
        "23.215.9.164",
        "23.215.9.165"
      ],
      "new_value": [
        "23.205.106.18",
        "23.205.106.25"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "20ad0677-238c-4e8f-a0f7-6ee8cb5c85d4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}