{
  "run_date": "2026-10-26",
  "events": [
    {
      "id": "321ecbba-98ac-46b2-8d94-1bc2a7d0c990",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-25T19:37:29.772493+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "42cf50e6-2261-4e62-aaf4-4c8ae15a8284",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dca835cc-9377-4445-9810-4bf512babb2c",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-25T19:40:05.567890+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "42829bc9-d084-4974-9382-82e5b3e45b3a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c82e0f1a-d2ca-4b9c-ba9c-0e208019ee93",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-25T19:37:31.475666+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "42cf50e6-2261-4e62-aaf4-4c8ae15a8284",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "103b1fdc-328f-4cb5-8217-2e87f83ecb94",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-25T19:37:31.166022+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "42cf50e6-2261-4e62-aaf4-4c8ae15a8284",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "787eb1d7-6588-41c4-a3f4-f951c0e4a348",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:37:58.396322+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.35.28.131"
      ],
      "new_value": [
        "23.214.124.103"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c546c709-95c5-48ec-8102-ec0d32ef5fdc",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "492b0a32-a793-48ac-b440-910cf703dbd5",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:35:56.462031+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.45.73.196"
      ],
      "new_value": [
        "23.35.29.215"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cc43cbbb-e376-48aa-938e-afd61714abd3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cd7c2c8d-40d1-4f84-8e3d-78a9d1242724",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:01.825630+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "3.168.122.102",
        "3.168.122.48",
        "3.168.122.90",
        "3.168.122.94"
      ],
      "new_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9372cc60-5aaa-4813-9744-edc7f67a99e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6b41f643-6c36-44f6-ab07-4078cd2a6acc",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:41.607531+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "23.0.205.204"
      ],
      "new_value": [
        "23.37.17.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3d142581-d0e6-455a-91c8-360bbd645fe5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f8c29b25-7fdb-43a3-8730-2bd73f5b0823",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:38:14.915895+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2000:2:88:1b80:93a1",
        "2600:9000:2348:7a00:2:88:1b80:93a1",
        "2600:9000:2348:7e00:2:88:1b80:93a1",
        "2600:9000:2348:9000:2:88:1b80:93a1",
        "2600:9000:2348:c000:2:88:1b80:93a1",
        "2600:9000:2348:d800:2:88:1b80:93a1",
        "2600:9000:2348:fa00:2:88:1b80:93a1",
        "2600:9000:2348:fc00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2000:2:88:1b80:93a1",
        "2600:9000:2348:3e00:2:88:1b80:93a1",
        "2600:9000:2348:4200:2:88:1b80:93a1",
        "2600:9000:2348:6c00:2:88:1b80:93a1",
        "2600:9000:2348:d400:2:88:1b80:93a1",
        "2600:9000:2348:e400:2:88:1b80:93a1",
        "2600:9000:2348:f000:2:88:1b80:93a1",
        "2600:9000:2348:fe00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "adee0523-35ce-4cdd-af49-24a44908be03",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3fae9c08-c1d0-4ccc-be09-3f8aba92f894",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:41:17.088975+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "new_value": [
        "18.67.39.106",
        "18.67.39.31",
        "18.67.39.44",
        "18.67.39.6"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fd778a85-92f5-42bf-a1fb-7757e1621b31",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dbe7193a-c3ca-43c9-88cf-99b90312aed6",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:38:40.016164+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ddcf2c19-ab31-4e8b-9bb2-5d047946f89f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "25300f4f-34da-41ff-8645-b17f7f2fae25",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:29.659600+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "184.30.150.71",
        "184.30.150.83"
      ],
      "new_value": [
        "23.212.62.202",
        "23.212.62.210"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e0441e37-4166-4e8c-88c5-a2f492c70f2a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2bb805b1-e2c6-45fa-950e-172bc7cbbba1",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:39:29.955567+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:140a:1000:b::b81e:9647",
        "2600:140a:1000:b::b81e:9653"
      ],
      "new_value": [
        "2600:1406:2e00:28::17cb:a60f",
        "2600:1406:2e00:28::17cb:a61e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "e0441e37-4166-4e8c-88c5-a2f492c70f2a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5a554ed3-d690-4815-8170-63d9de5de179",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:35:25.225465+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "69.192.139.81",
        "69.192.139.82"
      ],
      "new_value": [
        "23.48.203.140",
        "23.48.203.147"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3e6a8b52-d6ff-48ad-8a20-69cf0794272a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "04a01dba-21e6-49aa-b108-33ff19570e0e",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:35:25.994109+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:3a00:33::170b:cfe4",
        "2600:1406:3a00:33::170b:cfea"
      ],
      "new_value": [
        "2600:141b:1c00:18::17c8:58ba",
        "2600:141b:1c00:18::17c8:58c0"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3e6a8b52-d6ff-48ad-8a20-69cf0794272a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b0a76a9c-08d4-4f9f-b855-7cc35ebe006b",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:51.679738+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "32.236.75.142",
        "32.237.43.142"
      ],
      "new_value": [
        "13.211.52.232",
        "32.237.43.142"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b15e6ada-06c1-4adb-b0e3-ef67235ccefc",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6948a951-23dd-4576-b8dc-c3576150d23b",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:35:34.066158+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.217.104.168",
        "23.217.104.175"
      ],
      "new_value": [
        "23.205.106.16",
        "23.205.106.22"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fb75caf5-bbd0-4561-870a-2a952f2f8002",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "376c03e6-0b15-46fa-9cad-11f9aecc3d7c",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:41:15.256967+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.0.204.183"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c45f6da3-2ee0-4126-9c98-3ffa228cbc04",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "084e15d3-3d77-4888-811a-249694e40311",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:41:15.546118+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1681::ebe",
        "2600:1409:9800:1683::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:168b::ebe",
        "2600:1409:9800:168f::ebe"
      ],
      "new_value": [
        "2600:1406:2e00:783::ebe",
        "2600:1406:2e00:786::ebe",
        "2600:1406:2e00:79e::ebe",
        "2600:1406:2e00:7a7::ebe",
        "2600:1406:2e00:7a9::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c45f6da3-2ee0-4126-9c98-3ffa228cbc04",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "586ea91e-a07e-4887-b507-758f35cfcd9f",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:37:22.040736+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.61.99.153"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "90f35d50-b864-41bf-8a01-822912911fee",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "669707ff-9167-421f-837a-2a80e13279f2",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:36:25.340871+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "52.85.132.107",
        "52.85.132.19",
        "52.85.132.3",
        "52.85.132.65"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b04198ec-746c-4ab2-a1c9-51861ffc94a3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c2c543f7-153f-4579-805d-30000c825f3a",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:36:02.981362+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "143.204.1.108",
        "143.204.1.44",
        "143.204.1.48",
        "143.204.1.59"
      ],
      "new_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "838d372e-b18e-4bf8-be18-7f367951a855",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "85fcde5f-9293-48f4-97dd-8a152ff69278",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:36:21.635787+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.216.145.14",
        "23.216.145.25"
      ],
      "new_value": [
        "2.18.67.149",
        "2.18.67.155"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "79ee28b0-155e-425d-9d98-756b07c8427f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a48e0cba-5433-43dd-90ee-468834172787",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:36:22.304997+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1d::17d8:910e",
        "2600:1409:9800:1d::17d8:9119"
      ],
      "new_value": [
        "2600:1408:c400:c::17cd:6895",
        "2600:1408:c400:c::17cd:6896"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "79ee28b0-155e-425d-9d98-756b07c8427f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c9a2284b-0716-4c98-949f-d9c72ccaecd2",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:36:05.778679+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.210.216.134",
        "23.210.216.136"
      ],
      "new_value": [
        "23.212.185.159",
        "23.212.185.179"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0328a71b-8fda-4ea3-a987-b35d067763b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4ac469ff-96ef-44d9-b7c2-73d52823ddce",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:36:06.264190+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1406:5e00:9c::1720:986a",
        "2600:1406:5e00:9c::1720:986d"
      ],
      "new_value": [
        "2600:1407:3c00:cc::172d:2ec9",
        "2600:1407:3c00:cc::172d:2ed2"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0328a71b-8fda-4ea3-a987-b35d067763b7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "df9eb02a-8f1a-42e9-a8c6-c0f05c3ce704",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:40:48.240728+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "new_value": [
        "18.155.192.14",
        "18.155.192.17",
        "18.155.192.30",
        "18.155.192.42"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "5ffea9a1-b962-4c9d-ad04-3925d6e00ee9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a379d3c4-f051-4f09-8c85-d6ac6f3e9510",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:40:24.608786+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.213.34.73",
        "23.213.34.88"
      ],
      "new_value": [
        "2.18.67.134",
        "2.18.67.157"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "35888d78-1a09-494f-8ed1-541287dca5f5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "da23c44f-b7a2-4345-81f7-bf228c98d987",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:40:10.941960+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "184.28.2.162"
      ],
      "new_value": [
        "23.37.16.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13ee4d4f-216e-4979-8bae-2ae8a5def893",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a388c2d5-0cc5-44f4-809b-a3e20a695d4c",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-25T19:40:11.224018+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1681::ebe",
        "2600:1409:9800:1682::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:168b::ebe",
        "2600:1409:9800:168f::ebe"
      ],
      "new_value": [
        "2600:1406:3a00:b80::ebe",
        "2600:1406:3a00:b85::ebe",
        "2600:1406:3a00:b86::ebe",
        "2600:1406:3a00:b8d::ebe",
        "2600:1406:3a00:b8f::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13ee4d4f-216e-4979-8bae-2ae8a5def893",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "3a01561a-7fcf-4268-9e27-17eb800da9ea",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:56.966104+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "new_value": [
        "65.8.180.4",
        "65.8.180.50",
        "65.8.180.71",
        "65.8.180.86"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7f82a978-5dc3-4894-a635-6c5e3de26e88",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "75522c76-423c-4f37-961e-ff32ee0be319",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:38:22.114632+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.34.125.185"
      ],
      "new_value": [
        "184.31.113.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4d4bbc97-5f34-4dc6-b132-b9b26a422126",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "aa40c5b7-e360-48b2-b67b-b0c1968592a2",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-25T19:39:16.420281+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.205.106.70",
        "23.205.106.74"
      ],
      "new_value": [
        "23.33.29.137",
        "23.33.29.151"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "826946d8-8c9b-4fee-afa7-39487d1b9a03",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}