{
  "run_date": "2026-10-09",
  "events": [
    {
      "id": "707ebae4-4793-4d76-814e-a3989f36bfb7",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-08T22:05:42.832353+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "be934a77-1a6a-4001-b1ce-ec49ac2ece72",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ed101e26-076c-4824-8bcc-c22a6ab2dbb6",
      "domain": "health.gov.au",
      "domain_id": "e777b28a-f8b3-47b3-9f8c-964db7452560",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-08T22:02:36.881755+00:00",
      "summary": "health.gov.au: nameservers changed",
      "old_value": [
        "dns1.sge.net",
        "dns2.sge.net",
        "dns3.sge.net",
        "dns4.sge.net"
      ],
      "new_value": [
        "ns-1530.awsdns-63.org",
        "ns-1572.awsdns-04.co.uk",
        "ns-506.awsdns-63.com",
        "ns-599.awsdns-10.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "e1021562-1ba7-42ba-a9e7-f9ffb4e86503",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "4d9b72a9-c4f3-44b5-a42a-0eff17e789a7",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-08T22:07:44.486378+00:00",
      "summary": "theaustralian.com.au: nameservers changed",
      "old_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net"
      ],
      "new_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "0ee900e4-77fa-4193-bb7a-d0db6579ef05",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "58e72e9c-5a3e-4790-887a-da7e246bf2b2",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-08T22:07:38.609132+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "9194b4f0-96d9-45ca-92fd-60b5978b1c57",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "d9f9ac1f-54e5-4811-91ba-bf81798ab1c8",
      "domain": "health.gov.au",
      "domain_id": "e777b28a-f8b3-47b3-9f8c-964db7452560",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-08T22:02:38.508378+00:00",
      "summary": "health.gov.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns1.sge.net",
          "dns2.sge.net",
          "dns3.sge.net",
          "dns4.sge.net"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "ns-1530.awsdns-63.org",
          "ns-1572.awsdns-04.co.uk",
          "ns-506.awsdns-63.com",
          "ns-599.awsdns-10.net"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "e1021562-1ba7-42ba-a9e7-f9ffb4e86503",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a748b608-d511-4a16-b7f7-db6e386040c1",
      "domain": "health.gov.au",
      "domain_id": "e777b28a-f8b3-47b3-9f8c-964db7452560",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-08T22:02:38.070588+00:00",
      "summary": "health.gov.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns1.sge.net",
          "dns2.sge.net",
          "dns3.sge.net",
          "dns4.sge.net"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "ns-1530.awsdns-63.org",
          "ns-1572.awsdns-04.co.uk",
          "ns-506.awsdns-63.com",
          "ns-599.awsdns-10.net"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e1021562-1ba7-42ba-a9e7-f9ffb4e86503",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "ed9f52e8-1935-4072-9ab1-c1fa7bf98694",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:05:26.011171+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "173.223.0.97"
      ],
      "new_value": [
        "23.221.252.128"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ac7fa26b-cedf-44b8-9dd4-7c88d277a436",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "02e70d66-c802-4688-b999-3230bc93fb3b",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:03:15.529010+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.213.45.134"
      ],
      "new_value": [
        "23.14.141.223"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "889a0b7b-6e32-4da3-9d0f-a5b8b454bad3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8e439782-1941-458f-891a-837e361c432f",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:06:20.577490+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.167.99.106",
        "3.167.99.18",
        "3.167.99.6",
        "3.167.99.72"
      ],
      "new_value": [
        "18.155.173.11",
        "18.155.173.23",
        "18.155.173.74",
        "18.155.173.85"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "22ccddb0-bdfc-4ced-bf81-3c1143895dae",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a545a029-490f-4d29-91ae-a3cc1d82f9ad",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:07:06.198566+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.37.17.163"
      ],
      "new_value": [
        "23.45.137.104"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "23e131ef-f38f-4165-b264-beb811c25e3c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "56cab9ec-b33a-4247-8358-d6574731e675",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:05:35.308151+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1c00:2:88:1b80:93a1",
        "2600:9000:2348:5e00:2:88:1b80:93a1",
        "2600:9000:2348:8e00:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:a800:2:88:1b80:93a1",
        "2600:9000:2348:aa00:2:88:1b80:93a1",
        "2600:9000:2348:e00:2:88:1b80:93a1",
        "2600:9000:2348:ea00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:1200:2:88:1b80:93a1",
        "2600:9000:2348:1c00:2:88:1b80:93a1",
        "2600:9000:2348:2600:2:88:1b80:93a1",
        "2600:9000:2348:3e00:2:88:1b80:93a1",
        "2600:9000:2348:8000:2:88:1b80:93a1",
        "2600:9000:2348:ae00:2:88:1b80:93a1",
        "2600:9000:2348:b200:2:88:1b80:93a1",
        "2600:9000:2348:ba00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2ca251b7-98b0-411a-be19-dc963a0288a3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1400ee3b-7d56-460d-a6a2-1ac9da1f574c",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:09:58.092252+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "new_value": [
        "65.9.148.128",
        "65.9.148.37",
        "65.9.148.57",
        "65.9.148.67"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d527c0d3-b578-450f-9520-98c76b08d8a2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7f14a163-2648-4778-882b-7882b6691e9b",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:06:50.487290+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.212.62.202",
        "23.212.62.210"
      ],
      "new_value": [
        "23.216.149.145",
        "23.216.149.147"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c7fcaccd-f063-4a2d-ad56-74c10e0360f8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3144f6b1-ad34-44aa-ac94-d30155871ada",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:02:41.812082+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.220.161.72",
        "23.220.161.84"
      ],
      "new_value": [
        "23.212.185.135",
        "23.212.185.138"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d025d052-8391-4c28-8ace-0289a8c18479",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c491e74c-cd0f-437e-94be-e4ab66fe7969",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:02:42.145631+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:6400:62::17d3:7f2b",
        "2600:1404:6400:62::17d3:7f3c"
      ],
      "new_value": [
        "2600:1404:6400:14::17c6:732",
        "2600:1404:6400:14::17c6:737"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d025d052-8391-4c28-8ace-0289a8c18479",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b3aaf6df-f716-4f57-8b38-b6d72c2f4613",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:07:21.817844+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "3.104.27.246",
        "52.63.24.1"
      ],
      "new_value": [
        "16.178.66.8",
        "52.63.24.1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3c5cdd9f-994c-48bf-bdc7-b5413426c28e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "de823402-5ada-43bd-bb4b-a15e57521f7b",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:02:52.090072+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.201.195.47"
      ],
      "new_value": [
        "23.200.156.10",
        "23.200.156.5",
        "23.200.156.73"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "871b235a-a9bc-4701-b48f-88cacb76658a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e6c0f87a-00a0-43b0-b45a-984fc4a307b5",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-07T22:04:09.898211+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:5400:d82::ebe",
        "2600:1408:5400:d8c::ebe",
        "2600:1408:5400:d95::ebe",
        "2600:1408:5400:d96::ebe",
        "2600:1408:5400:d9a::ebe"
      ],
      "new_value": [
        "2600:1406:2e00:781::ebe",
        "2600:1406:2e00:782::ebe",
        "2600:1406:2e00:789::ebe",
        "2600:1406:2e00:78b::ebe",
        "2600:1406:2e00:7a6::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "63e01636-d02a-4410-acb6-33988b4aefdd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4c62069b-62ad-4bd8-8123-04bb6d27e810",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:13:35.810831+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.37.16.152"
      ],
      "new_value": [
        "23.45.136.137"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e16feb2c-91c9-4890-8521-09832e960999",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "49e6f380-41e0-4583-a0ec-23478647c534",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:13:36.692418+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:2e00:781::ebe",
        "2600:1406:2e00:782::ebe",
        "2600:1406:2e00:789::ebe",
        "2600:1406:2e00:78b::ebe",
        "2600:1406:2e00:7a6::ebe"
      ],
      "new_value": [
        "2600:1406:3a00:b82::ebe",
        "2600:1406:3a00:b84::ebe",
        "2600:1406:3a00:b87::ebe",
        "2600:1406:3a00:b89::ebe",
        "2600:1406:3a00:b8e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e16feb2c-91c9-4890-8521-09832e960999",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a615efc-d0aa-4891-aac8-19446695b158",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:04:40.619684+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.207.130.176"
      ],
      "new_value": [
        "23.52.211.186"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cee8b569-c8fd-407f-97c7-80aeb0d8f88d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1a340dd3-d70e-45d5-8275-f6ac9a70c300",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:03:46.975900+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "65.8.20.114",
        "65.8.20.57",
        "65.8.20.80",
        "65.8.20.87"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "509b641e-ff6e-41fb-a141-61c531b32ef6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "23b07fea-c605-426a-a20b-19906ff1a85a",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:06:05.374680+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "104.72.70.86",
        "104.72.70.90",
        "104.72.70.91",
        "23.55.242.202",
        "23.55.242.210",
        "23.55.242.211",
        "23.55.242.217",
        "23.55.242.218",
        "23.55.242.224"
      ],
      "new_value": [
        "23.33.238.112",
        "23.33.238.115"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5d451559-5d2c-4ae7-b9ba-3933d8051cd0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a5850022-7bdc-493f-8aae-e16285dd9a3f",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:03:22.826001+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "52.84.217.13",
        "52.84.217.42",
        "52.84.217.63",
        "52.84.217.96"
      ],
      "new_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b69d643b-c2ee-4b18-904e-168eda0d23f5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "20c55d52-731a-430d-990b-bb62699e989c",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:03:45.110498+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.219.160.16",
        "23.219.160.9"
      ],
      "new_value": [
        "23.215.9.148",
        "23.215.9.154"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae758c0d-4841-4266-b0af-cc96d4f20313",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9690379d-5ce7-447f-bb42-22e5b37d067c",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:03:45.422768+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:a00:5::172d:770d",
        "2600:1404:a00:5::172d:771e"
      ],
      "new_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8ac"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae758c0d-4841-4266-b0af-cc96d4f20313",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "41ed4012-a62e-4f06-ae92-385f1bfc4e21",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:03:29.465215+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "173.223.234.151",
        "173.223.234.155"
      ],
      "new_value": [
        "23.64.112.79",
        "23.64.112.89"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f0a01029-b443-4375-9edf-7440d20a0c33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "10999e55-49c7-4f22-9501-ffbe510d898b",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:03:29.759983+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1407:e800:2a::b819:3b87",
        "2600:1407:e800:2a::b819:3b97"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f0a01029-b443-4375-9edf-7440d20a0c33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e6164288-c031-4d34-aa77-fd4bc5914ae6",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:08:35.254062+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "new_value": [
        "23.219.160.6",
        "23.219.160.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e01cd9bb-9d95-4e02-b83e-15a8704d492e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b667a17b-3bb7-4014-83cc-0ab9deac1101",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-08T22:07:45.324347+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:ec00:1284::ebe",
        "2600:1404:ec00:1288::ebe",
        "2600:1404:ec00:128c::ebe",
        "2600:1404:ec00:128f::ebe",
        "2600:1404:ec00:1294::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1a82::ebe",
        "2600:1409:9800:1a83::ebe",
        "2600:1409:9800:1a84::ebe",
        "2600:1409:9800:1a86::ebe",
        "2600:1409:9800:1a8a::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0ee900e4-77fa-4193-bb7a-d0db6579ef05",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ffae53fa-4ac5-47e6-8868-acc1245424a5",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-08T22:06:36.614532+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.205.106.18",
        "23.205.106.25"
      ],
      "new_value": [
        "23.62.226.120",
        "23.62.226.123"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1a7b8b13-4d6b-4d56-b1a2-fe1461c1b8a3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}