schemas.v1.1.1.samples.APT1.Appendix_D_FQDNs.xml Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of stix Show documentation
The Java bindings for STIX v.1.2.0.2
There is a newer version: 1.2.0.2
<!-- 
    APT1: Exposing One of China's Cyber Espionage Units (the "APT1 Report")
    is copyright 2013 by Mandiant Corporation and can be downloaded at 
    intelreport.mandiant.com.  This XML file using the STIX standard was created
    by The MITRE Corporation using the content of the APT1 Report with Mandiant's
    permission.  Mandiant is not responsible for the content of this file.

    This document was developed against STIX 1.1.1 and CybOX 2.1 using automated
    transforms from Appendix D (FQDNs). It is intended for demonstration purposes
    only and no guarantee is made to the accuracy or completeness of the information.
-->

<stix:STIX_Package
    id="mandiant:package-190593d6-1861-4cfe-b212-c016fce1e242"
    timestamp="2014-05-08T09:00:00.000000Z"
    version="1.1.1"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:stix="http://stix.mitre.org/stix-1"
    xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1"
    xmlns:stixCommon="http://stix.mitre.org/common-1"
    xmlns:cybox="http://cybox.mitre.org/cybox-2"
    xmlns:cyboxCommon="http://cybox.mitre.org/common-2"
    xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2"
    xmlns:indicator="http://stix.mitre.org/Indicator-2"
    xmlns:ttp="http://stix.mitre.org/TTP-1"
    xmlns:marking="http://data-marking.mitre.org/Marking-1"
    xmlns:terms="http://data-marking.mitre.org/extensions/MarkingStructure#Terms_Of_Use-1"
    xmlns:mandiant="http://www.mandiant.com"
    xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1"
    
    xsi:schemaLocation="
    http://stix.mitre.org/stix-1 ../../stix_core.xsd
    http://stix.mitre.org/default_vocabularies-1 ../../stix_default_vocabularies.xsd
    http://stix.mitre.org/common-1 ../../stix_common.xsd
    http://data-marking.mitre.org/Marking-1 ../../data_marking.xsd
    http://cybox.mitre.org/cybox-2 ../../cybox/cybox_core.xsd
    http://cybox.mitre.org/default_vocabularies-2 ../../cybox/cybox_default_vocabularies.xsd
    http://stix.mitre.org/Indicator-2 ../../indicator.xsd
    http://stix.mitre.org/TTP-1 ../../ttp.xsd
    http://data-marking.mitre.org/extensions/MarkingStructure#Terms_Of_Use-1 ../../extensions/marking/terms_of_use_marking.xsd
    http://cybox.mitre.org/objects#URIObject-2 ../../cybox/objects/Domain_Name_Object.xsd
    ">
    <stix:STIX_Header>
        <stix:Title>APT1 Report - Appendix D (FQDNs)</stix:Title>
        <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Observations</stix:Package_Intent>
        <stix:Description>
            This package contains the FQDNs referenced in Appendix D of the APT1 report.
        </stix:Description>
        <stix:Handling>
            <marking:Marking>
                <marking:Controlled_Structure>//node()</marking:Controlled_Structure>
                <marking:Marking_Structure xsi:type="terms:TermsOfUseMarkingStructureType">
                    <terms:Terms_Of_Use>APT1: Exposing One of China's Cyber Espionage Units (the "APT1 Report") is copyright 2013 by Mandiant Corporation and can be downloaded at intelreport.mandiant.com.  This XML file using the STIX standard was created by The MITRE Corporation using the content of the APT1 Report with Mandiant's permission.  Mandiant is not responsible for the content of this file.</terms:Terms_Of_Use>
                </marking:Marking_Structure>
            </marking:Marking>
        </stix:Handling>
        <stix:Information_Source>
            <stixCommon:Identity>
                <stixCommon:Name>MITRE</stixCommon:Name>
            </stixCommon:Identity>
            <stixCommon:Role xsi:type="stixVocabs:InformationSourceRoleVocab-1.0">Transformer/Translator</stixCommon:Role>
            <stixCommon:Contributing_Sources>
                <stixCommon:Source>
                    <stixCommon:Identity>
                        <stixCommon:Name>Mandiant</stixCommon:Name>
                    </stixCommon:Identity>
                    <stixCommon:Role xsi:type="stixVocabs:InformationSourceRoleVocab-1.0">Initial Author</stixCommon:Role>
                    <stixCommon:Time>
                        <cyboxCommon:Produced_Time precision="day">2013-02-19T00:00:00Z</cyboxCommon:Produced_Time>
                    </stixCommon:Time>
                </stixCommon:Source>
            </stixCommon:Contributing_Sources>
            <stixCommon:Time>
                <cyboxCommon:Produced_Time precision="day">2014-01-16T00:00:00Z</cyboxCommon:Produced_Time>
            </stixCommon:Time>
            <stixCommon:References>
                <stixCommon:Reference>http://intelreport.mandiant.com/Mandiant_APT1_Report.pdf</stixCommon:Reference>
            </stixCommon:References>
        </stix:Information_Source>
    </stix:STIX_Header>
    
    <stix:Observables cybox_major_version="2" cybox_minor_version="1">
        <cybox:Observable id="mandiant:observable-36fd3338-7051-43f5-81ec-c4fdf59409bc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6649f38c-0af3-4133-9e73-575799923bb0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26ed574d-fad8-4d1f-aeff-47cbcddab7e6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-02ce3e41-3bda-4e20-9e0e-f4d6fbef8491">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8390fd29-24ed-45d4-84d7-c5e5feaf195d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72bec65b-b596-465b-867c-1caf0a8b0eb0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>attnpower.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e49afd0-447e-425e-be05-92135956336c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45bb8170-89aa-4b70-bb83-011c8abc7a48">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>avvmail.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b38146b9-fdf2-4164-a0a4-1089c01cf518">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26c6efbc-330d-43aa-aa6c-2d10868797d0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0932c923-97e1-4c25-adb0-a8a0ec0b69c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c019476e-7363-4de8-8ac3-ca39d03b2d14">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-085723b8-f4fe-4c4e-a2e6-ffc6025eda82">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bluecoate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d0ed4d8-3c7d-41f0-82ab-1caecfae33c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9134312a-368e-467a-a7cd-8682478d36d4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29ae16ec-3014-4b9d-9b26-2f49cf4a3e4e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01eaca1b-4748-48de-8f86-3587b65b94c2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d37f42f-100b-4f30-9ae8-a4ce15fbe64c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2960e438-173e-42b9-b685-8943a8246f73">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7a6b4f8d-8d23-49c0-8a2a-9ae57ef72018">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e8d99823-f181-4122-9046-3f39da339646">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c221369b-23a5-44a8-ade3-ae07c44ca228">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51ea96cc-bfa3-422f-8479-f6565f3f9f0e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8357722b-2ea6-4f5f-8738-095123dcf007">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-88529405-0581-437b-afba-bbf3ae931180">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cometoway.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0de58f71-cfc9-473a-a6d0-7cd316546e63">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-94828b4e-4901-43d5-9197-29abef22f2f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>competrip.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4a0fcefc-8fcc-4e73-afc5-4283f32d289f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4e956244-b25b-409f-98f4-0b1f1b4bf495">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2ed224d-90e5-4265-a225-2e7c5ac169b3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>copporationnews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e1b1e651-b8ca-4371-83db-953af0342ab5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cslisten.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30f23fc4-5e47-416a-add6-3638089f1bab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-39947978-fb65-4392-a87e-9f041c15170e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-05d8253a-f872-4913-8564-5579ea1e6f61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b1120ce2-24c1-4835-8bb2-aa9808d000a5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db2aeb4e-319b-40da-8419-cacf4e74632b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c8f80047-137d-497a-8e12-471eed28e49c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-640968f4-3801-4069-892c-796d2594ba14">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4703346-8a4d-41a8-9182-b66a15d012f0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>giftnews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-abb06e08-0e27-41fb-8f96-0719447a868c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-735984d1-4c74-427b-96c3-82cb9a3b3c54">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c443ee69-11cc-4ee1-9558-cfe17be8d427">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hkcastte.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3f3ff9f1-bb4e-4392-89e5-1991179042ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ddfa800-7784-4d92-8a86-ef893584e8d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hvmetal.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-38a47050-eff7-49e8-a8ef-92858969b120">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>idirectech.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43ebc736-48e0-4ba1-95d1-fd8bcbd4bd30">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0354bd80-bab4-4c98-a8f0-3ed705c48201">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aae7407f-61b8-49af-af3e-073b84dc21f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-68d9b9a1-fe1e-4962-8f90-95d7596f4a88">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c8e67e5d-df56-4627-afa6-9a4eeddf4dc0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d6d2ca7b-8302-42a0-b28f-18dc78e72e90">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cb3abe2b-be20-457a-a969-db3467383f93">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bc25c004-3b39-4238-be32-42736349d60e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>maltempata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9185e8d0-a455-40d0-a398-6d305102ee69">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1533d955-cf95-441f-8960-03dec7f3e8a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-068236a5-7626-44e3-9fdf-7fed4ea4668b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fc92418b-7fcb-4129-acb8-23462e6feff8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>microsoft-update-info.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8aa2591e-319d-4e45-bdac-9fb04334f43d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1002c58e-cbde-4930-b5ee-490037fd4f7e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-679d0bee-e5a7-4c46-88d8-54b6c81a23aa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-be36d6a7-a498-471e-b5e7-ebca9369c3ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29125663-cec7-4681-98e1-b023e7d41ecb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newsesport.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-35f86720-86b0-4ff8-a636-45f2a7d559d1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-54fcf31c-0310-4c04-8ef5-2b542af48b38">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fff6ccc7-a38c-4a61-b282-26c004284ec7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-60bfdc30-7011-4ab1-a3b4-1e2622e7a9f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nirvanaol.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3dc7e445-4b7f-465f-a878-bd9e2b3be715">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ns06.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6315a90-d804-43ad-ae4c-4bfaa5d636a2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-99a6fe15-50d6-48c8-9313-f0d27383785a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>olmusic100.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a2307dc6-9947-45f1-be3d-0e572a71139a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>onefastgame.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f0ced459-73c4-45f9-9048-7ac1a07fc7e6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>oplaymagzine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0153e437-d0bc-427d-9682-7c8a1297e97a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pcclubddk.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-98b702e8-a092-4117-884a-9288dc83feb0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>phoenixtvus.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2771af3f-9f0f-42ce-affb-5f986b949114">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8511a456-f23b-45b8-998a-3f11c184d421">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>progammerli.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-422bfa3a-d677-4573-a07a-739758e7fe0e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4e50c1bc-f501-4bcd-bcbf-67ad9bcf2a6b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-797feda4-f905-44a3-bc1f-ba80831ca985">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cfcbf00e-f2aa-4d67-a74e-1a81dde77610">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8005d0ba-17ee-46fe-b4bc-68eeae30a276">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8950c03c-b7d4-4e46-b76b-3f6e5d82baf1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74ca021c-da99-4783-8fb9-767543d8e93b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eaee88f4-7d7a-4cc0-80bd-5e969ae677a7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aa50fcdb-542a-4626-a250-e69c864d77ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shepmas.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4e767d71-6a4a-46db-a856-d0a02c0b6c2a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>skyswim.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e0f27645-586d-4bed-8777-4bc400927d56">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5b60b99b-4323-4f3b-960e-c834c324c9d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9e47b6be-e5d1-460e-bc5d-d5844fbfe1de">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0b5cf22f-fe26-4e19-900d-bb03975a7bb3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50fcebf7-6f24-4b24-b21a-bd31a5a39028">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>syscation.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fadc4f8e-e152-4a15-8a0b-6fb90a9bc26d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>syscation.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ec4b90c3-78fe-442b-81b3-975c03ec16c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tfxdccssl.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22e4077e-8cd7-4672-bee5-28570d44cfc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-923e876a-e3b5-4c3c-8af4-6bc50a27a33f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tibethome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-857fa2d9-b73b-4f42-8ac5-600aaff2c1ed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-93f84b85-3794-41a6-9cd4-cbe6d32a7a93">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29b30958-7fda-49e2-8111-bee95f504021">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2b1407e9-f309-4705-b760-8e624a05ee45">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ushongkong.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2a9a283b-9247-4c8f-8459-fd4b72dfe492">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f1dee470-049f-4929-be97-1cef41457b78">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>usnftc.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af0098e1-08fd-4acf-af3b-ebf9de13f1b8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ustvb.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de9e9e31-2717-4445-8853-1f668737be2c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>uszzcs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1a67fb07-bac4-4870-bc1c-8740d02c6cbf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cc517140-598e-4ca7-81f3-5cccc779c615">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webservicesupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa410118-ffbb-4b1f-afef-626bb5649f15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f42d9464-4bbf-4534-8439-a67885146042">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1a7f8c5f-e20d-4e75-ad11-f4ed6422f1ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>youipcam.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-be91679e-5ecf-4777-b00e-4eba8fd9972b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>08elec.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8192166f-0a1b-4d01-a493-b02a4c4daef1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>09back.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1124e475-0051-4dfc-a439-b97ff8d43cb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>3ml.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b431e5f5-de2d-424f-bbe5-56f2421e5719">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>3pma.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c2473f45-5102-4e7f-83f8-386558bc00ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>4cback.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-95b8dac6-19e9-47f4-83d7-ae6de600c305">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>7cback.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-547c496d-186e-4280-b5ec-1a10cd477272">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>911.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f707bead-fa7e-47fd-9fd6-e4b3397b0d02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ad.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ceb331e-4d36-4cfa-b63a-c61866503898">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-af.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b41476b1-4c60-477a-bf6a-885202671aeb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aam.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d52a7c60-b9f3-4321-8f3a-5d761d24a2e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aar.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a98d02a6-3c4a-4b1c-bf58-31dd165c0768">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aarco.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9cb4a62-1d30-4cc8-8245-113641f4d458">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-bne.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce38f72e-2daf-4d8b-9ab6-de5e4a13f36a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>abs.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4d44d4ad-b88e-400e-a3e1-9cd2eb4ea623">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>acer.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7bcece81-1b3c-448f-8da9-045dfc6e2c6e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>acli-mail.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5d106466-a1e6-42ad-b233-61e756e10eb1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-co.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-890e36ad-7de2-48b0-87ca-efc9a84be921">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>acu.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71cb23a9-492f-4d11-8d59-d3e7b9fc4ef4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adb.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e1292902-f45c-48a2-ae41-20cbd756b71f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>add.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6daaf1aa-2f8c-47e6-8815-4b4124469069">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>addr.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-89d0fc67-5a53-4d2f-9257-e9984d63d3cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adi002.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c55dc0e-5c93-4c7b-a7fd-b4c3f3559714">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-dl.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4be097a7-9109-46ba-b628-bf7a7ef61d54">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>admin.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c09174b-e17c-43df-a2f8-ddeb9d4f4b61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>admin.datastorage01.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b4544d5e-9936-43cd-86e7-bba4716ab16c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>admin.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-61718c43-8d4d-48df-bab8-daeaba3de5f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>admin.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4da6aa5c-865c-4cec-948f-166df1c44355">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adobe.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2bbbd1ef-0ffb-4e69-9b02-facb12d11f64">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ads.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-422512df-c462-4cab-8f25-672e1407b911">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adt.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-577a1be3-cdd1-4c34-ae2a-6982411c9bee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adt001.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-87abf00d-b36c-4212-ab95-4b7a2614596e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adt002.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cef11859-a9b7-443c-b0d9-87f4edf360bd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adtk.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09190a93-aaf7-4bd7-8e1f-74d4521ed310">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adtkl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9c116230-82e6-4d74-8862-92dcb92ca755">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adtkl.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d542068d-b155-4d29-912a-d9c860f42560">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>adtlk.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa221f38-f3a5-4bd4-b120-8e4185813064">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ae.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6af8e773-4d5b-44f4-bf82-78c6441f338b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ec.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ab22124a-61d5-4f78-95c7-b2ffa10a74f9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ep.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85c43e56-b478-4a80-a995-b1a30d9a8d10">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aero.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-129ef526-c1b8-4496-86b7-91d5f0a7a202">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aes.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1b4c2c49-9116-41f4-bf0f-1b1a2bd580e0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ex.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-feec1c41-094d-48d2-9fc6-206c9e3e563b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>af.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26fd5cb3-8586-4d14-a98a-8ba075118ffe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>afda.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-56c92afe-991c-4613-9f9f-36e5c88bae49">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-fj.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a48f6bea-e1fa-4122-aad1-83da139a3cc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>africa.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0e2c7a96-b831-40cc-9922-eaeb15890fc7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>africa.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4e5223aa-2eb6-4abd-9510-987195ebf1d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>africa.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5ff78353-3059-46b4-b0b5-865a5ce1d68b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>africadb.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a747ed8c-9026-4756-b1ad-0b41a64f8a3a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>afw.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-39f48cef-74ac-4314-b280-36422ccfa74e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ga.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e53106fa-3a7c-4140-b4db-3ebfc9557757">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>agl.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f101b7d-ed30-4f60-a86f-e24a8ef0e2eb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ago.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e21cce1-6d4c-4763-b37c-ab28e98119a1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-gon.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45b7c1d5-4216-4be9-913e-5375d532c46f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-he.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-869beec8-6638-4001-9eda-ef2c54d30b26">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-he.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-316eb130-ebcf-4f97-b197-47827f6b4eb9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-if.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fc9aa17e-7dcb-4508-b673-0add6e766ea0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-iho.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ab82b6b-ba50-4935-80b8-94801e54057b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aiic.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d6453b79-6327-4f33-b1c5-09f99a9bb2f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aip.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-147584ce-7228-416b-a109-a478de6e871b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>airline.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-548d4c91-f6ce-44c1-83e1-3b166af31720">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>airplane.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1c655fbc-3c7b-4766-91e7-ae63d0025bf0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ait.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e16517e2-746a-47db-80ff-f39c6cac9650">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ja.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-17bc9d07-b706-4e12-9945-48ec049f2b8c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-jsm.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7de6f979-bc73-4ae7-83c2-7adc650d2f3f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-jsm.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7de81ac8-c307-4880-a247-f40e869506a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ak47.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe4a6307-91fb-42bd-a96a-1d492170d1be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ak47.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db4db1a6-1a16-4219-b3ed-da45d9face8a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>alarm.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-084480bd-bf17-40be-8627-9ee1e3c81753">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>alarm.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c9240378-0a9f-4a56-b07e-cf7eb029a2d4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>alcan.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-86b1c2f5-01ad-4e15-89ea-6b29ff02b322">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>alion.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26f37975-826a-46d6-b2fa-ee96df41664c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>alone.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4bf2c882-8166-4768-bc39-30e50bcdc11a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>amanda.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e70aa81-76f1-498a-bdb9-21f0fdf8127d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>amne.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b87692f-adf6-4ff7-ba47-19af96d87fd1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ams.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24b8e319-af6f-4bf2-8975-0299b002a41c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>amusement.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fedcaf2a-943f-463f-a26f-f70d34b21cf3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>analysis.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac28ca80-4fc2-4569-8921-d1593941d3a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>anglo.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c65dd1f3-89d9-47fa-bc6a-5092c4010897">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>anti.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c57cc73-554d-4b67-a564-e3ea321c9876">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aol.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a83a2a19-b8ce-4b59-89ed-3fa476a01621">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ol.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a8793785-726b-4130-869d-938e316dac33">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aol.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1866185c-32fa-4b82-b22d-3c4e5ec9fd97">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aol.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bbb211dc-02fc-4997-8734-c23e4f303243">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aon.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b0837358-0ec5-4c10-a563-fa5c60c53569">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ov.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea91b300-76ee-432d-b382-82bf9931d7fa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apa.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c31e002c-261a-4ce7-b276-e9c167871311">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apa.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3be23a25-f7a6-416a-9027-2497033a82e6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apa.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64a29651-ca27-4f22-a469-13a108a51ffc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apejack.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db38f945-16c9-431e-a6e5-b22e5f132c40">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apekl.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ad7d674-4f84-4ba4-bbd2-8a101010166e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-pep.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a717a060-d1a1-406e-b0c4-294095220f6c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>app.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eeec2179-74bf-483f-9c26-e140ab33fadd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>app.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eff67488-45c9-4f09-a2eb-0de09f152311">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apple.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cf746346-bfc8-4122-a26a-a8c94122c197">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apple.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b4bae49d-5c96-45fe-b3b5-e7e5a0a3d34c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apple.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1e8a0fbe-73a7-4464-b000-34e35d682bec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apple.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-abbbfc56-40ce-42c2-876e-9770a6363476">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>aps.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-700e8912-a0c2-411a-a368-ad8a1dfc9d27">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apss.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d62519c-737c-4378-8b8a-059939fde6cf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>apss.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cc04ed5b-6ced-4858-9904-9365f44b5e63">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ara.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d4bd228f-78ac-49ce-af50-c232c23fefdd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ara.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c5d9c7d-13a7-4c27-a18a-bc4d12e285a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ara2.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7eda8a95-fc71-47d2-8a7d-eb43d26d8666">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ara2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fb5d1c61-12d5-4d05-bf24-f0cb01c80049">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>arainfo.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24001ada-0340-41db-ba14-c463759b5ca9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>arainfo.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca0ae99c-4c52-4178-bea2-cf2efcdb2702">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-rdr.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-752cf24e-1844-44b0-9a46-3bc601cbeabc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ares.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b7eb0ec-da22-4bf9-b72e-2c10c5698e5c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>argsafhq.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9600c7e0-9c99-46ce-b43a-1b342c054128">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-ri.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0553a253-5e51-4184-b31d-05238ff150aa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>armi.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d1f42f76-6148-4927-9c23-f5b1aa301631">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>army.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ccafc067-3046-4329-a847-4ccb7a0fe809">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>army.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-25d7e3b4-27b6-4ffe-96ca-59451ed2e79a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ascn.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7691a90a-496f-4185-b8b8-0ad8b81f8eb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>asiv.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55161a11-f43a-4270-9ed7-19de1d78c998">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>asp.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-174cd74c-d6c2-4205-9190-7dad8a250d03">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>asp.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-73673824-de5c-472c-b348-1b3a5424bdda">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>asp.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-92760d0f-2d06-44dc-ae8d-90bf6a920dbc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>asp.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fb23bea7-1663-4971-ac37-a4ad9f3bc9c2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ass.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4becd8ac-ea1d-44b9-b481-1aff83d64127">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>astone.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe1484d8-d5ce-44fa-b5b2-55d6e8c7cedc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>atm.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b3960892-a983-475b-9d79-9bf217a71027">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>atom.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6d8f64a-fddb-4a36-8cea-cb33867d75fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-uac.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-67c0348b-639b-419e-9c00-bd90a9bb0e1e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-un.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-97c732ec-b0b2-4be0-8171-1dc0f14cd714">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ausi.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2fd29c44-f486-4dc6-a76a-ab67ff5cc411">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e5e0efdf-e67c-4b23-8bc8-bb9c1d9e6b3b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d49d3cc5-df37-4dfa-b39b-0004f1a8c399">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ed9f8cf-daf4-461a-b24f-6ee9d62be623">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-156a785e-94e6-4eb0-a8d3-f5a2967ea108">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-580d6d30-a471-4026-aa79-9bca67fd0ca9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7d867666-00a2-4732-91f7-deae4dce22db">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>auto.myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-757bee3b-d9fb-4e6a-a791-0f154f0108d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>avast.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a64ae0ab-4dbd-4347-a416-3f0a58fed463">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>avph.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71d48c7e-769d-46a1-ba62-587aecf32366">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-za.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bedcb39d-e7ff-4039-97c8-3bd195112713">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-za.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-284003cb-eac2-4213-8186-aee89696e3bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>a-zx.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c0c93b79-24a4-49d8-ac85-d8e42daeaf06">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>b.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-841e1957-96e2-4a43-a291-7c3373b782b2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bab.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ed4c2de-3c1f-41bc-b71f-13041878ec1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>back.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bb53cdab-4907-41c2-94f3-d5d24d6d481a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>back.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-56701d17-cd77-44f0-afce-e93ece74738a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>back.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-76e86fa5-c35b-4aa8-9e61-79fd79ef7b6a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>back.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ed8e79cd-1db7-46cf-9f5d-bf4663a062f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>backsun.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-989126e7-2e21-4e36-a969-ee3bf4a292d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>backup.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-19541e81-c511-4299-8187-43e83a78ae62">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>backup.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52757601-b7b4-43b4-8b0e-e5743fe0c86a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>backup.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-993b8d55-9f74-4b32-a314-0b0755a2b2c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>backupsw.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-13e4459d-3486-4ae6-9052-36ade48aea7e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>banner.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-82eb5d20-2d80-4e72-b0f1-239dd011b3a2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>barity.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a67a38a6-f106-4908-9580-44b054558938">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>basketball.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-90e7410f-b2fd-417d-8e6d-3485c69a8474">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bass.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-34433409-11dd-404f-b749-67c69e328535">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bat.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba72014f-60d8-48a3-b2d1-7498883353e2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bat.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b9950c04-c49d-4b3b-932b-f0d7ba5c17cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bat.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f9c9a3e8-3f45-4bd7-978e-adab3412ba70">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bat.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d4a69b2-da1d-44bd-8e25-eb8cd4e05b4e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bbb.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0db5ffa1-841d-4425-97b2-15c260a90a53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bbh.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-da380729-75c2-4bd7-805b-56d8084726ef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bbs.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5766fc75-68b0-4559-9528-068cba239cdb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bbs.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aa5eb7f5-9209-471e-8e2f-b6ca89cf860b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bbsfu.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c41ced25-f292-4132-94e3-a63352c2e663">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bcc.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce04fc24-d69d-443f-8293-ba0ad94437ac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bcc.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-081af6bb-7e57-456a-b94a-0f652f057bbd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bcc.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c7e9d6a-a297-49b1-8f44-b710262e9a63">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bee.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c3cf17b-f24f-47ca-9c0c-42ff7d0e7f80">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bee.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a8d50ab7-12e4-4172-b5c8-7e3c5ef3d802">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bee.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-99249492-b0ab-4609-b3a4-a0ca50d531b3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bg-g.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-500d4fcd-751a-43cd-bb04-15126d56f098">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bhbt.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-39aefd35-960c-431e-be44-8ab61aefe2c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bhbt.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85206a8c-4871-4264-9c31-0cb98f987ca0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bing.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e88fc490-e73b-457f-b2c4-d9cbf184cbd0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bitdefender.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a4554667-70f6-45fb-aba5-10ac536f1416">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bkav.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7dfe3494-aae0-4784-b730-f3d40d0eb7e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bkav2007.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d3e3538-544e-4b58-8482-97d7766626d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bksy.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd8ad4f2-242d-4983-9f48-d36a21a74dde">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>black.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3cc56b42-0340-4002-ad19-98456a803bd2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>black.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ffc71822-f517-4fae-b2de-dedd2d5e1d2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blackfish.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-733b8730-5519-46ce-9a3f-83dd9ba37aeb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bll.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f4326c3-d300-4f8e-9828-288ff484ceb5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blog.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2373359d-bbd0-40d3-bae2-2918147501f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blog.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2fc8c0da-23fb-49b1-b378-b91efbf73acb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blog.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d140c8d7-f4a6-440a-9034-82867af9db04">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blog.regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f51345be-2b59-4fcf-8d5c-e327674f6d8b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blow.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-300a094e-9500-4978-8779-a0bc4522aa5d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>blue.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-665b41b3-6871-4360-9c82-d695f2f775af">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bluefin.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ee632ae0-3aef-4e19-8db3-91e3dd4af9e5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bmi.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e7f2fb5-3bec-4413-bf8e-5bf43f896303">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bob.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3f0205f0-f2be-4626-b7d6-311c9999d50a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bobo.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-73bc1231-1776-4d39-b35d-6de5e3f6dc38">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bobo.oplaymagzine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-460cff80-8c6c-4473-91a1-faf9f6abf9b3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>book.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dcd25927-36df-4521-a6ba-2eba879392df">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>book.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0ee18887-d00a-46b4-a192-902586ec7418">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>book.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b64050f5-5c79-46cc-9833-c3d3d10887d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bot.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8ff1831f-c809-4e70-a483-32776717d90d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bourne.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f64086b-aea8-4bb9-9713-e5597e334ff6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bphb.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0da57e6d-cc61-4145-a851-32283d25ef3d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bring.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-858be92b-2814-4a8e-8ef7-d7db08dfcda5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>brog.regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1be418d-b02d-4691-b1ce-530297dcada8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>bswt.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ef9c5992-c549-4623-b51a-4eaf062956cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>built.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1bcabae-028c-4b0a-b161-ffc544748303">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d4fddb3c-1dcd-438e-bae1-bd9504a84efb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-974fe2fb-f670-47b8-97ce-4d02db499b94">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dcc01921-0818-4bd1-82be-fed6627fcc88">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a36e59bb-8357-456a-97cd-2b95d64669c7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a92835d-f84b-4654-9982-3199f48a6ed0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>business.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-325b6db8-4436-404e-a4a6-bed0dae1f05c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>buy.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ed6b2bb1-a27e-47ac-97c9-f1c55dd22afa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>buy.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-89d48828-c9de-4ae1-add4-7cd9726e6495">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>buycow.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-290da974-8454-490d-9ace-045352a90953">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>buyer.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-53e01461-07ee-4491-b4cc-30b39fef6392">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>buz.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-58b1ac95-a01d-4c7c-bd54-1077efac2eed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>c.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a2ca8f6c-6c42-4b79-b61b-06501ab16a99">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>caaid.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-252d0e0c-7e75-42b9-89a6-9f35f29bfc06">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cac.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-157dd0a4-ff63-4904-a34e-afa24d66b074">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cac.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c80b662-10d2-4f5f-a4b6-98811bddd5a3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cache.aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c3360f5d-2295-42a5-bac2-84addfcbcf28">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cacq.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a2e57744-f5d9-4e77-b910-e17c0afc2772">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cadfait.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f37d652d-b48d-4827-af45-2fef7df67b10">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cais.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-77cd60a1-72fe-4f87-9510-8026ab3223d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cais.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f94a5441-f9e5-41ec-89cb-db3513af5379">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>can.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-56d429a9-d42d-41ea-bda7-3af65a9ebfd5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>canada.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1fd40ecb-7ee7-43cd-90f6-f297afda0770">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>canary.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ef8f5b5-cf4f-4802-a10b-2472bbd132e2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cappuccino.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0950cc5c-e1a6-4231-9740-8a8359e15180">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>car1.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a29054e6-5d68-43ef-98b0-ea431c6ba183">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>care.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01bcf7da-6888-4d26-be9d-dc610d655cf4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>care.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4a62caa8-fe09-440d-bf0b-55aa88ca4a15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cars.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1a932984-ee3c-4301-839b-9cf62adf6d61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>carvin.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bb6f9c84-6cb3-41b7-aba2-dc44abe050f0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>catalog.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bbd21543-7988-4e0f-a66f-c7ff8fdd116a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ccsukl.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cf9b0c10-3d6a-4d2d-9be5-f63e3c5803fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cdc01.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e18cb201-eb8d-4542-ba4c-126070cef451">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cdcd.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-413909e9-e74f-4e60-9499-e79b2d88cb57">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cdd.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2764e924-7bfe-4e84-8b9c-4f098e3a68f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cdrnkl.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7b5caa8c-8304-49d3-ad1d-29b03919f719">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cecilia.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-88e7fd83-f63c-4cbb-a85c-a4efec69d8a2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ce-ip.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7998439d-47f6-4962-84cb-3164e718dfb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>center.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-acf1fe45-ac2f-4451-8b62-63697e737407">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>center.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a23ede65-e3b6-4d78-a67d-0907d573ff72">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>center.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ca02374-411f-43c2-a4a4-e20426896592">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ceros.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-afe033ae-cc0a-4c73-97a7-40635bdf3124">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cetv.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-905bb9ae-7675-4892-bb84-46ecbc81804d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chat.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-32c246e1-1cee-42d5-8291-5dead2dbff46">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chat.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e90d1ed-91b4-4a80-8aa9-f5869b260ae3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>check.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-76f5df03-586a-4988-9194-afa33e3690c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>check.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b35b9dfe-00c3-4215-a3d1-d427a76e463b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chicken.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d985e41a-3ff6-4697-a740-b2cdd9f61fbe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chicken.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a020a484-3c63-4045-bb08-ddaf6cfb4731">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chivas.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4be673c8-fad3-4b22-bef3-8bf782265860">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>chq.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-14c26088-ec7a-4e8f-9244-d9ab525dd6ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>christitannahill.appspot.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4944884e-46a5-4435-8f04-ac73a55670ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cib.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47feef44-4001-47d5-8cb0-30bbcd8d9a73">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cibuc.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b0bc3e12-5c46-47ed-bac9-bcf23b5cfddb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>citrix.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bd416aa3-f645-463d-9ace-31d7024c4de9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>citt.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d595f18-d0bc-4482-8179-975ce6a7decb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>city.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-705f969c-4d81-47f9-a777-fe40a06315f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>class.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-699792d3-c467-4906-a305-ee03d71e6eab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>client.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e52a2eac-3039-49c7-ae45-bbd0592c56e3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>climate.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4f05586c-4cf7-453e-b54b-ea22a1145660">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>climate.oplaymagzine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8df4e86b-6b12-4afb-aa50-832e48decbe4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>clin.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-93837b82-d823-4635-80ed-5d740d709be3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cman.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cb8f0d06-bc72-4b82-add3-46bd82c040a4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cmp.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d41ae826-6c4d-45df-b6f3-14c407ac88ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cobh.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cf1dff8e-9d21-46d5-838f-dc5ddffbd238">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>coco.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b7dfc1ce-7f60-4c6b-85cf-7a855aa1a6dc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>code.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-df0676ef-f9a7-4085-8ba3-0b0a744ae628">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>code.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47a9a357-bf32-4314-a097-5f7755b49e94">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>coe.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6a725e2-6a84-4d8d-816d-74efeba78238">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>coe.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c50b4d0d-96d7-4e53-af72-c8860be9a65a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>coer.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6c171120-523d-4c39-ac96-20a019a53682">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cok.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e44db861-2f85-4588-ba5c-064a51b0ae3d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>com.conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c843e67e-fc81-47e0-a2bd-5638bccea03d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>comfile.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6d6e6869-c58a-4fba-be7b-10e2ea291f22">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>commpany.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-807e2229-10d2-4556-abd5-d6f5223c6757">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>company.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-32aa7cc3-da91-432e-b7b9-0b4c976c85a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>compfile.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b45385f1-cd81-476c-8ac4-f527611e9e97">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>compu.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-723cf1d6-b7b9-4a08-bee2-a95449d7ab92">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>compute.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f83a419d-862e-4ba8-be2c-9ea01c4b098c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>conn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-93f16c8b-ef9b-412c-b7c9-d076d77eed15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a3ea629-75c7-40f5-99b5-6add15f3843b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4590d267-8a77-467c-bcde-f2f3865a091f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ec3a303f-53ff-49b7-b2d2-9aa0a912a54d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74904db8-10e7-4e58-91ad-80ccc4ca3620">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4f83deea-f18d-444b-87ee-4361f93a9090">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>contact.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-daad1385-3117-4daf-97b2-24e51d341bb0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>content.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-772fb057-0b7d-4822-9170-9efc87ab686a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>control.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ec3b735-79f0-433d-9eaa-a329cea0745e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>control.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9fa4e17b-b16d-4b56-bd75-4875a4c30e6a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cook.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2f44c9f-adc4-4d0f-9ea3-cb9eca80cad8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cool.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55587da6-84df-4d6c-aedd-2f7504d3270f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cool.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c55dbbc7-75d2-4e85-b2af-9c4fe930e8a4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>corn.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b51984b1-306a-4aac-bba8-587b7648b733">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>corp.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d1598f40-1073-4c4d-9b5c-c5a2b61a40d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>corp.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ffda7c6f-4aaa-4b0e-a1a0-f063b6959e52">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cost.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac8a04fb-4774-4e6e-9d69-90d18fea897c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>count.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71989920-c214-4480-9cc1-4eb8ed0202c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>country.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5498807f-320a-47f2-9a5f-8f17d9e0a96c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cow.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72745240-a34b-4cc8-b947-4904a5b14c52">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cowboy.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-139b37ae-65b0-43b8-bec1-3c9ca3e9728c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cowboy.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-915f5daf-a3a6-47e0-8fe8-1bd9f6ad1c78">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>crab.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-17fc1f16-bca3-4f47-9c7d-0cd154534d8d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>crab.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bb47032c-1b02-4d7d-b653-7e0e0e1a4d46">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>crab.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09f7e765-4b53-4242-9393-4e9077a2ff8a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>crackling123.appspot.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-44393ed3-9f9b-4cf1-ae74-7152e40258ca">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cross.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ab9cfb0-780d-4be0-938c-d1518f918a49">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>crz.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a987d7d7-23a8-4d79-bdbc-99670961ee53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cs.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8081f47d-0762-409b-af9e-6b9bdb53b595">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>csch.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6fbb8c17-b58a-4644-bdfb-21d058a84238">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>csupp.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ece2fde0-0e08-4963-a361-4b389ce61367">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ctcn.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ff3655f1-dc5b-47e0-b80a-635ff30ec56f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ctcs.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d76d7f80-0c57-4bc9-b9b5-74ebc9671498">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ctcs.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-63b6631c-fe88-4cd7-a449-2447360aa336">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ctimoon.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7abc4d20-86c6-4c2e-a2d8-b12da5a71c50">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ctisk.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b867a8be-d802-4c29-babb-9bdd1fc5789f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cubbh.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2c956dd2-b888-4bdf-af1c-48405503069c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cubh.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-75eb9310-c630-467b-b470-5b054780006f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>culture.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5abaa696-401b-4e79-a2f2-14c33e6e10e8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cure.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7aff169d-c9e0-4568-bff8-dfaab401c2ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>current.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-470bd58b-ffb4-4726-965a-dc8463da9203">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cw.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d038c956-056a-4dd0-be9a-9f77d78ae369">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cw.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b147ef7b-f31e-49bf-a7fd-096186b8b557">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cw.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3c10417a-8639-4961-a08b-08078701b2e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cw.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe3052e8-6e72-4faf-a9c7-1ece3b571d2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cw.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-252822a7-4bb1-4fd9-897e-5cfcc4d4d64c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cwe.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-41440e5e-cd16-4580-9397-3d5c960593da">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cwe80.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2163fc52-162d-4954-beba-c20d4f07544d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cwel.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-713e88cb-7f97-4506-a6f7-c78c924f9d4c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>cws.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-90147520-32b2-4618-835d-5c72db330c37">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>d.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29af8ccf-1bfb-4763-a325-820e2f986e49">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>da.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0e60a683-04af-499d-bd80-a5aa234a231f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>daa.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-32faabea-03a3-4820-984a-ebdd818dec1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>daily.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74978432-54d4-4487-9045-b4cb9398da98">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>data.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-79fa5503-db63-4add-a4b2-3ac520cea460">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>date.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-20926ec6-1f45-412c-8a0e-c03f8bd7a599">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>date.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e93594f-4492-4507-970b-b3e38ea9c3c4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>date.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1227f5d4-7e16-4a7c-b7ca-c707c5b5ecd2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>date.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-024fc3c0-583d-4cae-9657-ad63e80e93c6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>datehelp.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50c0a723-9d29-43aa-bde7-2e2f7059a54b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dating.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-253cf875-a19c-4a26-8066-8299aef6eecc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>db.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e98785f3-b3ff-463b-85ee-5b0c596fa32b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>default.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-703728a2-196d-46d3-98ec-d65db99de95a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>defense.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-726408c2-4f0f-44a1-bf76-90cf43089051">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>del.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c52068c4-c3ff-4ed1-a436-dbe07c92aef7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>demo.myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9859bbd1-c315-4c41-b48b-04c13312d1f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>den.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1580964e-5f80-43c5-b37b-39b52a0058f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>denel.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c6e277d4-efe8-4d62-a740-65e3d112190e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>densun.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f33190b-00ea-40a7-a75e-ad085a5fc1a1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>des.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01299fdd-16c4-4b15-ac3c-46f57457023e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>des.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5bf1a146-a308-427c-96ea-8cda4dcd08f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>develop.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-336eccdc-fa13-42cb-b6b5-40bd78a7b7b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dhfx.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e90916c2-d697-4888-8125-a857df5a8fa2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dias.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ade1ee5f-5b6e-4820-b6c6-7ab746c21693">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>digi.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f2c1972c-0a1a-4888-a52f-78dd867a80e2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dith.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce93180e-7571-4da3-8584-296cd80f8b70">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dl.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-df516435-2c1d-447f-90a9-16e360d01471">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dlkl.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-27d4c9f6-d1eb-4b17-bc88-d718c11e4614">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dnn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-544ce3bd-92b6-4216-82d6-551d5751ecbc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6af94665-dc3d-428e-a6c8-e54f7c68a722">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01776aa0-88d3-45ac-aa07-cd1f6d758ebe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a69ad61-afb0-4a9e-8ff9-a9332c8c8374">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns.progammerli.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e918f37b-ccb4-4f96-8d58-706ff9ebd6cf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns.webservicesupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1a133c7d-ec08-4b14-9d6f-37ea0027e7be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dns1.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e89d66c-2807-4aec-8a5b-7d64d15f7325">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dnsg.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4bc6513b-5f5d-4248-a36d-a6ba3e4895c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>do.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dccde91d-5419-45d5-9eab-2533d710ce60">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>doa.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0f6567bd-6da3-42d1-8593-39d9f525973d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>docu.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4be4430a-38ec-4a93-b931-6bc86acb34c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01e5af22-cf1b-4849-9ed0-020f540034a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0ece81e8-7168-4fbd-9d95-c3d26ec1d122">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a22703cd-b2ea-495c-83d7-1e925509cd23">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bd3497f3-2889-4f45-a49b-84eb1605c823">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4a5e4ff5-0b97-4585-a6c3-db0a19310589">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-69d78934-5dcc-4d1a-943f-c50db7519f37">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d072b2f5-9caa-47bc-9e40-22c0ba23f5f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>documents.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-18950d1a-bc97-4e31-841c-e066bf419e02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dod.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c05705e7-9bfb-4a4e-a289-31bc1fcbd5a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>doekl.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-051aeca9-0292-4517-b361-fa6ada95414c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>domain.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e448e1be-0bdb-4ea9-a802-35227efee313">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>domain.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d05be0fd-7809-4b9f-99f8-0178bf1a7a54">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>domain.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cabbefa5-e1b9-4bc3-87a4-08a63d04ae8f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dorkia.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba2728cb-82e4-47ef-8b43-82e9d4ab42fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dot.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-923ef209-3fb0-4fff-91f4-72b5b5284c76">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dotnet.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-917d02c1-ae3c-4140-aff8-b8be1044da73">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dove.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e3716b6-6e38-491b-b8cc-f030b42462d8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>down.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e0bd78f0-0594-402c-a804-3f336a263424">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>down.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a4689b68-ec51-40fe-98be-c47cdaacde59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>down.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-57482f0e-96ae-45d6-8809-aedd11f88cbd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3298a1eb-41e2-4bad-b10c-afb5453a78bd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4a3882aa-fdb1-4e5e-888f-4641acc50362">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4cfa2b9b-8557-454a-a2ad-b39633f116b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-84fa6c9b-dc8c-4902-be9b-5a2eea34251b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.idirectech.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b6c2657-99cb-4610-b10c-54a0b69b0ed5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7b883a27-9f46-413f-8d68-31a915f67bd7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>download.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0f46b933-5702-4c51-92d1-df505b1b6334">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>downloads.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71f50efa-302b-4283-939a-117ac3ca5d23">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>downupdate.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1cf5d2a9-9e4c-445f-8016-81358eea9713">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dp.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-087cae61-b65a-42c3-abf0-68fa34c42b59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dq.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bf46e9a9-fda8-49ea-8b7c-26e7c5e6299c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>drb.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-36818e1a-a441-49d1-b6ad-bd5bb20cd780">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>drinkwater.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cda49c38-a547-40b0-bd30-f67f364aaa4e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>drop.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-213ac7a2-a984-4f0e-bd58-2563c419ec19">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dsh.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-07b760b5-d952-4fef-b7d2-7acb0a15760f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dsw.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0fd826ae-81f3-459d-8c7a-7cf5a984d3aa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dvid.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71ac9a9f-6bd7-4888-a63c-85147b869e53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dvid.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4b454e5e-694d-4af9-9872-fe3218a7247e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dvn.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-696b048e-a532-451e-9475-b1223a72826f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dyn.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51f4ab9b-7fb5-4ed3-9fab-92957baf5b24">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dyn.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-afc31968-69dd-4d2d-bcf0-90e5017b753b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>dyns.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c3f82f8d-192c-4d7a-b3dc-a022903f83b7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a43d2685-a023-4661-9ad9-f2a27fc8db8e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-16299811-7f7a-4987-8664-017f5fcb7a75">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51a7d73b-3e30-4d90-8c95-35fcc5aae4e9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4252432f-1433-4831-b44d-64f293a83162">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cca52817-2b0e-4f96-a5f1-1788e58219c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f33db42e-0c1e-40a4-a605-c77cd7cf3c7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d063b2c-a39c-4318-abb7-6ebec0ae9dfb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.microsoft-update-info.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f03737c-52eb-4935-b7ab-d0c157e4b3d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7612aad3-5973-439c-a7fc-417782520bc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0be3489f-ab4f-4909-be55-1f920442ff8e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26f2672b-3516-4636-a329-18cb12b98bb1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-18645c80-4178-4666-80eb-de40d639429a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-78b5f813-b30e-4201-bf14-d16c2809517b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fbbe06b9-ca2d-4e02-8bae-da0b43142ad7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e728d1ef-fba1-4c2d-a37e-f6f68ffa48b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d78ab024-c22f-4e2a-94c4-4c6d38b8342b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>e.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ddbc36f0-d755-42db-881d-f08333ba4265">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eaof.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8cd4dc58-bf87-4709-8470-ee91cee5ad5a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>east.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2854e4a7-2df2-4305-8e4f-fd26efdb2cfb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eatbeef.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d51115d-b3dc-49dc-8b24-0866d29792cf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ecli-cow.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2cc35752-b035-4942-8f58-fe2f623c4b5b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>edit.aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09b84369-9498-4fc2-ba2e-29926627df13">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>edu.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f4f9d8ca-2656-45c6-b430-efa2014e14fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>education.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-61f83f46-87de-4cc4-a7ab-88290d723109">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>education.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bce56983-0d2c-4eb8-b0e7-cbccf9ec13b0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eeaa.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b9d8b519-ff09-4082-93ff-a0ad24270758">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eee.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e350974d-5c7a-44d8-9cc3-d5c782e2064e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>egcc.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-03c76bd2-6f63-40a1-8879-479917a4628c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d611540-8689-4075-a3e6-36f142c0b294">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31fae42e-c845-4c39-80b2-c7d87eec23a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-16609f3a-c895-47aa-bf74-9c31505b3731">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5dc8fa98-75f5-46f5-9014-6d3a5d4d841d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f20522f2-7a85-4821-a410-1d0fcb10f1e8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-17e5710e-abae-4def-a09b-62bdc4c6e93e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2cc76424-35bd-4156-8dd0-e466894862c6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7da8b75f-ad70-4018-a133-17c5281e7ca6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-109155e9-8240-4672-8c74-dcb78c14f647">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-27ef645d-9a41-42a8-83b9-6ef74aaced79">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9467510-b60c-4cbc-84f9-05dd9e857e7e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d0d01e4d-ef7e-4fb2-af70-8a6cc38e130a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-038a9949-93a8-435b-9987-1013f1a65e72">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c373385d-1649-4bff-b6fd-c9043a4bd51c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-90771b0f-5398-440b-aa41-75c029ff976f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3cfb8dd2-4066-4c21-855c-90837d313b26">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c5b18f6c-9988-4d7e-afae-973ff7151317">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-adbe2611-2821-4726-962c-f079f54e070a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3f6147c8-9201-4aee-b1c3-4e97f0fbe5e8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0f53fd82-bebb-4482-a48f-07ed621f9130">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1c83cc3-e308-43b3-a7f4-63bda9179f9b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-248c6a1c-e8bb-44a0-9d14-9ff00381f715">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e12290cb-8913-4fa7-aa4d-e152cc14ed4c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9d30e950-fcf2-4cf3-93ee-5c3834dec6f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d20f781c-623f-403e-ab63-5eb79a4f9b5a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba5d9b9f-190b-4a05-bb4c-4a45c3154e17">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>email.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9baa8d38-6f47-4717-b726-2bce28ea05a0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>emam.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bfb5a5a5-64c7-475c-8529-00433484f2bf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>en.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f8284f20-e203-4701-8089-3ba020b0d2cf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-77b8c8ba-8e8b-4827-ac88-a3ada737627d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7af501c2-eb28-4941-a7bc-940782bac847">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dc078349-551f-4557-b93a-977855cff208">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-89e14b27-7240-4071-aafd-e629804d1ba2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d09ec3c4-f4ab-4f04-9faa-799b9fd042fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>energy.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a8f17650-4a48-4cbb-9e0c-0306b62c1311">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>engine.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e5401a7-c7ab-424b-b284-c5b509ce8966">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>engineering.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9bf3676a-cec3-44b6-bdf0-c46b76d06504">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>environment.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-da1d47c5-8de6-4ca8-a5d4-a28baa595d7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eoaf.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-202345e3-230c-4786-9a39-b558839f858e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>epod.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4547da38-b9cb-4070-b76e-9f0f2150dcac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eu.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c4a4f4d-ada9-4ceb-92c3-d145b5d579de">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eum.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6bb4e57-1dc4-4629-9ade-7b3d28aedb61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>europa.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8432b583-ceff-4d0f-bd7a-44111e99ce66">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>europe.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-338a4874-552f-465b-a131-a4094353ef50">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ever.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-863392a8-c3f1-4b9b-91d3-0940fa5c1589">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>everest.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-caa4131d-460a-4e80-a690-94a69c9e6ee1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>eye.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24b6b79b-56f1-4fbf-8f13-e7efa7a2083e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>f3tel.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a80889a2-762b-4ab3-955d-b73fcea17252">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>face.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-60ac9d2d-e95c-4413-b593-649dd1dfb13f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>facebook.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5e9f5d8c-1b5e-4e0c-b348-1b0485afeea3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>faq.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d441e5b7-ac38-460c-80f6-95cf75a36bc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fashion.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5254053-8f19-4f91-acd5-b8b11d137c59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fced14f5-eeaa-491e-89c7-7c2696424fff">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c63221c1-aff4-4409-a483-12782dce57c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70dfee96-a1f0-4171-9d2b-3ff603797a15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f52e5149-252c-4636-a16f-f71b756e06b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-08c6ea0c-45dc-44cc-adb7-075b9fc93b1f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e485cf0-d108-45b1-94f4-516589e2887e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a16175ab-a6f3-450d-a304-082db10e560b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ab244b1-4ea5-4be0-b014-3cec4f6facb5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3700fefc-8c70-4140-8005-4ec96aa35c41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-063e7ce5-c4ca-434d-aa33-4c9c5e49dc3a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ab3826dd-d5fb-4884-ab05-8bceaf0f173d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-25b2361e-d0a7-48b5-a53c-24857bcc1914">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fax.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f410d45-c3ed-474e-9280-75854386ca4a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fcn.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b72a4d32-d382-48bb-83ae-e5abc735e470">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fed.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-876a38ee-67b3-4ec5-b4f5-eb9a3d7083ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ffej.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-084db6e2-1333-40ff-8257-5684f7de6a3b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ffej.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e918e4ac-d000-4ada-a452-75838040c151">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fher.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-023074b2-0a83-4193-84d4-997ca342da41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fher.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ced5be5-153a-4af7-a23d-512c1598c308">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fhh.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f18eec25-da4c-415e-a7a2-efb822c3e095">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>file.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd4e59d8-362b-48e2-bce4-92ba36f77910">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>file.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2a00b90a-78d9-4054-bbad-f60651253381">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>files.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d347a8d1-0644-4311-acb4-dbbe4cce9d6b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>files.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b934643-8020-42b1-af08-19e7d426bbc1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fileshare.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c6409527-1f98-43a2-91d7-f8f89a9f90ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fileyp.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fad27b63-a9fa-4ef1-b9fd-5d823ccc3cdc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>film.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c19ef848-b172-46f2-9145-148cf300384f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fim.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea42ac1e-3ccb-4e4d-84f4-d6dbc43b3443">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fim.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a9c9f90-4a36-4933-aa30-18dd2b887c33">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85186723-ab67-438d-8820-2000eebbf58c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-822367fa-e3fc-43e1-96ae-c023e51bea1a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1440c36a-d507-4d7d-9fb4-b3e85342fd21">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2224b328-8534-4dda-b49e-8d50bbf63506">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5641282f-6d38-4e13-9422-b75aa65cd257">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a65c1ea7-fa48-43b2-89c9-792b7eb2bfb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9eb3d0b6-79ee-41e2-ba0c-0960bba4d769">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9de38c01-74e2-427d-9a1b-91a2695e1102">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5b630e84-f3e6-4c17-be44-754e0451b59f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-216d73e9-e40d-4409-8823-e1c1a20ee16a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finance.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-16f872a3-de5d-465c-8c1b-b48087ca3341">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>financial.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c783f581-5eb3-46c2-b4f8-4e164c06f6fa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fine.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa2df435-8efc-4dc2-a136-c58ea7ae24f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fineca.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ad3f3ddb-06a3-4088-9394-31e694ba3acd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fineca.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-df1a054e-b910-41e5-afaf-3adc46729731">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finekl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3cf3f0b0-20f2-4d48-9ad5-9a12759614f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finekl.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a963973c-d73f-48c1-8d13-cde27a690500">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>finekl.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f64b23d-4b51-41c6-afaa-871ee5e2b2f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fiona.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d650522d-96d3-4caa-bad1-74b94274b039">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fire.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e5b63116-0eb4-4c32-8b47-e5b75ee647f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fire1.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3138b2ee-a152-42f0-a6a0-2e9056da02eb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>first.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba6178d6-85f6-45a2-baa1-9b06b7e8d83f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fjod.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30b313d5-9bd7-46fb-8759-7a8310588eed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fkfc.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2543c8a6-29b0-44f3-acb0-5af9d157a512">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f0082dd2-c725-4d20-880b-e475346d83d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1c0824f9-e596-4ea3-8f3c-7914e979b6ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-292fab40-2085-413b-ba92-a88a9f407cad">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2365bd4f-b332-4940-9c20-8359fd65c3ae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70a9296b-5394-4041-827d-1e44ef0eae58">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-59142da1-ec3c-456d-9fa9-f4d074065fa8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1acd24d4-5e63-4f92-b965-f82913dae4c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47df048f-1a41-45a9-8bd0-fa32d8d990e4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-91222766-7f61-48e8-888d-7f2681559646">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flash.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d9119c42-081f-443e-88c4-8339ae5edfea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>flucare.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9e31d72e-0d96-4d36-b9b0-710847831e67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fly.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-03d2f0c4-2389-483a-94d3-b37eb4dfe6c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fme.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-173c3678-8ff9-4b8d-bffd-68c4f95a3948">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>f-mi.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fff590c2-05c9-459c-8fbe-e172310866c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fmp.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a7cffdad-7048-4d43-a664-ab222ab40893">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fmp.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9fb1add1-80e8-4765-965d-162865c94370">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fnem.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c87cb8a8-a8f5-4fcc-aa24-ef20d9b8ae89">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fni.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0243d5b8-fb2c-4cfc-8212-796e955d0380">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fni.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-198cadd7-16d2-445e-9a55-e93b526a8619">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fni.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9a4c39cb-db06-402a-be7f-e55a277c3ddf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fnpc.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52204cee-c622-4821-8215-52bf3570c0ae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fnrn.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-634ed690-05c4-4efc-8f6f-a88b029e7a38">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fntel.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-932f91e8-cc25-4ca1-8686-79aae2367e8f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fok.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6cabcd44-6d0f-424d-afa4-d9639ee888c7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>follow.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1977c3a4-b543-4284-a9fa-5969d0f6c034">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>food.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a6747f38-1c87-481b-b90b-5a4419eb2607">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>food.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8b311c92-0db2-4928-b871-81374adba67f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>football.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f8c828fd-00b9-464d-baf8-3dc554ed59d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>forum.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b1ffc4af-3fe9-4752-a959-e2cfc2cd761d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>free.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3a9a865f-0441-438c-981a-d834b3c288a4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>friends.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe0f0be7-2c17-4125-9913-5cad38352a5c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>froum.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-757c5399-eb4b-4261-a535-a8c39c525673">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fs.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-39d74551-7d24-45c1-9c21-dd56f13226b8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fs.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f88cc001-72a6-4c74-89f1-f79b686ed722">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fstl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1c597132-bfe6-4940-838d-b57ef9cc3b34">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fstl.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04b18a00-28a5-4670-b943-bd4b69b60ca3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fstl.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4672846e-c046-4e1a-aad6-5acf34be10d8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fbde6c6f-ff96-48bb-9481-960e9c53b60b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64d7bede-ad28-4d9a-af26-e9eafb755092">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8484d8ce-535a-4a16-aaa7-e688ff791a61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c0f8c2b-81e5-4a66-bc92-b6b04180f3c4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-855702ba-1738-489c-90dd-299e2c2c0b41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-316d2c48-74ec-4e8c-b4f5-29889bafad27">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6c84f81c-1a01-4635-b748-b642303a7cb1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-180219a7-b299-4f8e-9482-2eb5881b6754">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70c6d3af-58ed-4dfb-93ba-4d0d35fa6921">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5d6fcaf2-b284-4c45-8a03-9db40b0b8b82">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e6469412-e84d-4497-b4b9-9e1e8922477e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6df2e386-42a6-45ac-acac-3ee5b1c84e86">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0541ce61-9ee9-47c8-8e12-46407eebd5e6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-480ffa99-b4da-4e99-8a1c-3ed2e3b15daa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba52b821-c851-44cf-a114-a9471476e7d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-be431823-58fa-482a-a53e-f5f338e4ef84">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c5d2741-808a-4363-8a8a-a58a633daaf3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-92bf3ff2-bea7-44a3-b6d5-c4be6d2a88a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-255703b2-b9f0-4709-b9a8-d166f905856b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-44f2aee5-db46-4414-a94a-55e45d6cf542">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-62e80fe2-1001-43a2-a93d-626725396475">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-28b910dd-852c-4b23-888b-c106ae049879">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5e84eb45-9f84-46cc-98b8-00a4ec8072fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa5de49b-9c90-437e-a2ea-906fa022a05e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-769d3be3-0399-4399-b94c-4c5a73b405a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b45e24c2-fb75-48e1-bb14-b42ac6bb131f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.ustvb.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-301d9d83-2361-4ca2-bc25-561c5a7b8993">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftp.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-da6269ab-8599-4cf5-a08f-975ebdb444d8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftph.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9289673-f080-4625-9307-fcc4effd3cee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ftrj.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea859a05-42c5-48f5-846a-fb7fbc1d2a9e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fuck.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5ba9454a-8db8-4c2b-9750-400d45c6a061">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fun.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca3485e8-873f-4263-8959-bba42b49375f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>function.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-546be0f3-6a9c-4ea4-be20-37d218e9276b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>function.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aaf09126-879e-488a-a7bd-276508f57814">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>funny.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eefca662-b70e-4539-bb2e-5683f15f89bd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>funny.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2cc1a9e0-3f12-49e2-8246-4a7434147ffb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fwb.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-720e6c61-3a37-4839-a166-36aa83ce847f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fwb.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-050f9d2b-3565-4268-a47c-9f5211fb71c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fwmo.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7cdade76-c732-4a06-a661-25d2581547b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fwmo.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2b16109d-4266-46b0-a34c-d5381eca22a3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fy.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f24b598-a33e-4088-90ec-b91cbf84da09">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>fza.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b90dc15-a832-42d8-9e0f-6c153f0b0843">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gaca.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-73e6cb0c-adb8-4f2a-bb95-3ce604c3a790">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gaca.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aef65955-44c4-4402-ae93-fd0d6d725320">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>game.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca211b27-7e3d-4365-9b7f-cd36a03883e0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>game.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac6fe9a1-7ddf-4f7a-b14b-8f554024ae74">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>games.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7daaa539-c990-444d-8e6e-6db377c77e67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gannett.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7b66cebd-ccf5-4a20-a16b-83bce79279c8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gatu.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-19a3c536-e584-4385-b569-e7b49e28d4a5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gayi.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c96e4434-10b1-464d-b142-59ef835cc72b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gee.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c0b58093-dfb1-4f6b-8478-921e482d9910">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gege.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30f9087a-f503-4a46-ad32-dfdfb374681c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gege.oplaymagzine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1eb5590d-4fc7-45cf-8464-c59272ec2307">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>geneticmedicine.conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3df6caed-c3ea-417e-bf02-e2201b19a43a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>geo.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dce6980d-9604-463c-8dfa-6d43475f1268">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>geology.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15869a92-731c-46d7-b437-71255187ba67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>geology.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2328c2aa-0a0a-4f96-9104-968a432a41ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gg.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2eacee50-5526-4b06-afdb-e4e5bdc90983">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gg.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0738bbdb-66fa-4850-9ec1-2ec6aa75cfac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ghma.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-777d5e54-4524-4421-8e42-400ebd05fae4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gjjr.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-106abdea-7b72-46ac-8622-8aac364a1f3a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gjmy.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-015c0e77-c6c1-4567-b675-5affebe1026c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gl.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9bc5244a-0862-4280-9c18-ec1c927a7ec2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>glj.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2dbd04f9-dd68-4985-94e8-eb3fc916984d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>global.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ecabbab6-f607-49e0-943f-afd7613e52b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>global.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ecdec1d-16e1-4a4b-9d7b-137d05c5f55e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>globalization.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b4585d6b-c830-4b43-816d-3a8be4126056">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>glx.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ad0c0e31-52f1-4c99-80eb-eb4d6289fd2c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gmail.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4b48cf15-44bd-46cb-b06c-f1e9ea419f03">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gmail.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-08eecc8f-8415-4d2f-b398-4c015bf4b391">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gmail.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4019fd8-b496-483e-965f-148df9de7dd7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>google.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f89194c-b144-4f46-b603-78c536274cd0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>goverment.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47bfb6ef-d1f9-4407-bcc8-bc4bf146451f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>green.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e2fcf9e-df7a-41e7-ac45-8ae3355aed1b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ground.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-18122a76-ce3e-476e-b883-9a8d6d1fac64">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ground.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-476a8070-2c54-4117-a4c9-b9906e753914">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ground.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f795a65a-7ee3-43fa-b23a-f552a9f0af4e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gsti.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8b2871fa-e1de-4e49-b62f-b3cc52824fc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>gsup.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa430dc2-6520-45b5-ad61-b2a76d4d441e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>half.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-046f5384-023d-468c-b5bf-bb88dd5f0e2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>half.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b46ab35a-537e-4395-a0eb-cfb84ba7dd76">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>happy.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8528c829-1398-43f5-a990-bd78c2e36c3f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>happy.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-48e2b98a-22df-45d3-819f-82b222183ab8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>happy.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fb33a0e3-d117-43ec-895d-66c984e31fca">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>happy.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e518659c-a887-4909-9e53-418b5526377c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>happyfish.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d78ceb3-9a65-486d-86b6-167cff755c60">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hav.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09aff988-d1b8-419c-b314-261f3095b382">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>health.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0973a008-5aab-4e12-b184-ceeedf0b15fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hello.mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-754149c4-a538-4d75-9f75-4d549ea0648a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f1324059-16bb-452a-bfde-62838fb9b6f9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-960d8cbb-503f-4424-9c44-1f01f911c9c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-57ac608a-bc80-4d5c-9dfe-ad501454b939">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e83d9bf3-95b4-4cee-a484-04f992277cf2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cba6b091-d111-4e53-8671-1752d2e14223">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-736e2572-3761-48cc-a194-fd4554a28399">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>help.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b002cf2d-6367-41b4-84f7-4cd87e15d79f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hi.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-977c4086-53e3-4362-9877-e7e7c3c6d5e3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hill.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-34e8eb63-3c28-4a5c-98c8-6802b3b3032a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hill.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b4b2fefe-fca2-4e36-9745-b4c12b23e745">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hill.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15bd6b85-4993-4601-b7d4-ee3d5fb96ed2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hill.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f307e3a-297e-45fe-9339-7149f9299545">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hm.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bea60279-5369-4f47-93f7-911cb6a14f90">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>home.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-28e6f0bc-407f-45e1-9645-ca4092af53f3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>home.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ab62184-6bcc-4f5a-a6f0-842c74fee2d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>home.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5dcddaf8-d512-4fdc-9db5-6ed9bd926052">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>home.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-accb8e30-55dd-45d9-86e6-30be5f6e5715">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>home.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d89b82b4-948b-4eea-8129-eea314f91290">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hon.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aef908de-5fc1-468b-a2e3-3f895f08f527">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>host.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d264f03-357a-47c3-a473-3391dfacc700">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>host.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d5acdc26-9eef-4cbc-be80-3ba771728db8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>host.regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b75aaf09-1e8e-4de4-8003-145da142946c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hostname.regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7dffe7cb-73b9-419d-9c78-c6ad20ff4fae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hot.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af0348a6-7c11-424c-a7a4-aed78d36f2a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hotel.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-899e4844-a74a-46d9-985b-458e7e1cf4f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>house.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e5f3cc1-ce4a-47a2-84ad-2299b6218404">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>house.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5bd73a8-9e1f-430a-9812-c5a7a21f58f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>house.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4698efbf-43e1-406a-ad12-fd2cd730df5f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>housew.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a783c533-de24-4727-8ae3-90d7721c7fe1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hpd.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f381d446-4599-46ec-ad94-f98e26529c95">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hq.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a614169d-b1c1-479f-ae8e-03b58f926a17">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hrsy.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d4eefc26-2a93-491e-810a-471f3ecfbe30">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>https.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15706db4-7cff-49a7-8b69-48b033e4f615">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>https.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bff1a7d8-97e1-4937-9626-81a69533e823">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>https.progammerli.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-387f0176-3aa2-467f-a40b-9e8a0764ced1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hu.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d8d522d-f6a4-4fda-8335-9bcf3aa082e3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hun.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c4119ce-18e2-424e-b0f3-277e83b028af">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hy.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-27268f73-2bde-448b-bd7e-b13c8c6206c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>hy.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-46d34cda-bc3f-43bc-9e95-1885bf1be059">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iabk.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6cf68da-e41c-4a58-af95-d829bc0f9f1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iabk.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5306c9c-1fab-4c39-85ea-495563310a39">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iai.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7ac5c700-0a3c-4fa1-8192-06dc70904b87">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iamge.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d690f409-9e0e-4434-ab5c-9d89036a3219">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>idtheft.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7753b81b-d959-4313-acaf-6160227cbff7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iea.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a8327013-35d8-418e-a8ed-5fac04b56b8b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iexchangefxn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9bf9809-1550-4f50-9b81-1159a5410323">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ifc.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d21a354-ed03-4e52-be8e-8013eca62974">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>image.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c167ba63-e869-41e9-b5f4-070c32570161">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>image.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b3796a98-e51b-4060-be5b-cf0f54107d4d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>image.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d37eb23-d713-474f-8813-8611a3034315">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>image.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6c70e295-28f4-4e11-98f7-dbf55730f07f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>image.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-33b8205b-577f-4e2b-9891-51846b258d4a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>images.spmiller.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9069b6c3-9476-414a-a96b-5492794a0ec8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>important.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64b657ba-b074-4513-97e8-1df1d1d4336f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>index.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e6b804ca-dda3-40ba-9779-bcb879f0c71d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>india.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9a117aa4-b673-47f2-a0ba-b7bab093c1ef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>indian.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-27bb4281-5748-40dc-9f02-b49da5c5b560">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>indian.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b832c344-ff68-4171-9ea4-a2e483f5da95">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>indonesia.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4be6cea0-5f89-48fe-b842-682bcfd17405">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cf7358e8-d933-41a5-99b3-b2be9584cf4e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-067c37f2-d2a2-4012-aaef-57dff63fb092">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9abe2e92-2508-4586-a42a-a1a0960f8d57">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01b9d8de-3f37-43ed-af20-3e41f1e60aaa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-688cd618-945b-492a-9b55-0323a54115bd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4735ffc1-11c5-4f1b-813f-629b9f215a00">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-95ec2e9b-76f1-4777-85d3-ef4922cda572">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e4547bf-424a-447d-97a9-586fe6c9f06f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.idirectech.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-003178a5-2564-4372-859e-4406660a2ab7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d16528b3-9d45-4079-8192-1fd1de0e7ae1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-357895e8-b824-43a1-a4fd-8a156208a6e0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4022bfa5-d79d-4e80-b379-364e01e1d482">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1e1ac1db-eba8-40d0-9fa0-8e1789d094ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74caffeb-d2fb-40e7-954c-ca70ff65535b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04d09754-9a75-4ca5-aba8-951169183cd1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dc40396c-0e26-4f15-bf03-bef7582d717d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.theagenews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-273ff8cd-6a59-4e33-8bdf-6d0b6edbecd6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a3cafba0-9c14-4073-b42b-e5ff49c24534">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85232344-cc46-4479-b24c-13a10e7ec088">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>info.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-94e6a425-9ccc-47a2-b8dc-d573c67e8201">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>information.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2db9acb-698f-432c-90fe-9dfc032b899a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>information.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af12d3ff-acbb-456b-8076-c0405838ef8c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>information.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e60963f8-a66e-4b47-8919-a4a817ee2aa1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>information.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4288197d-1211-4f1d-a3f8-1bab3b0149d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>information.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ab9b9df-7b4c-4ea8-bc89-932a1daaace0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ins.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45dde9d0-5d92-4e97-94aa-1d63f8c5d215">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>insat.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-03d8ac54-1929-4b91-9c3b-871b1d78b75b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>int.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6324f3b-3006-4cc9-bd36-460fbfcb3101">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>int.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ecb1af67-495c-4914-8309-eab54b1ff9e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>intel.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b80193e3-b8c1-4964-a332-e3f8c89aa479">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>intel.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9a5ea1a7-5c5b-4fae-bf36-ad6ee8d553ad">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>intel.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa16cbfe-2028-47cb-9883-baf0589b8de0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>inter.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-84334e86-c9f4-4e88-81ea-0e5c6e94d555">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>international.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c7bd5f1d-a60a-4628-8c4d-4e33d412c46c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>invest.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea886cc7-366d-4efe-8a09-ac0bf984215c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ips.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c3c76a56-75eb-4dc6-bc56-dcde54244239">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iri.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d6cf7595-b010-45cd-928b-a8f80524ef1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iri.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-660f7ca0-9c1a-4875-beeb-8b26e13b1cc7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>irl.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba8ccccd-18e5-4613-a84a-d6acb273813d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>irs.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42a701b9-990a-49ea-8a43-35af6d1f65cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>irs.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4297f352-cf7f-441d-ba94-be86a8432946">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>irsauctions.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f325dda5-d54c-4530-8fcd-8230efc8b46b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>irssales.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c53420d3-4130-494f-9b91-a46a6b34438c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iscu.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9192e286-d97e-44d3-b8d9-1004cd5480b7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>iswb.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ebfc7fdc-b98f-412f-a554-3d4d33017604">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>it.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3b4b962a-62af-4c55-9b7b-60468ea49695">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>it.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5d404f01-69f1-412e-9290-e7d287b3317d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>itau.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aaac2ecf-f36b-4c12-8b75-38ed6039a38f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>itinfo.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c5f30c7d-e64c-4f44-802a-8f9c443103ae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>japan.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-97870ed6-b950-4fdc-8d45-ae051f33fac6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>java.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6226f93e-baff-4d7b-98aa-78d095882b7d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jbei.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-934a08f5-bc38-4ec7-9e3b-966a27de9d54">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jeff.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d8874d64-7693-40a7-9f6b-9956461a4245">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jeph.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8fa4de6f-148e-48cb-b5b2-7a1d06e8186f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jf.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3a73cda1-c5e9-4029-8c9a-9efcb7f03a97">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jfn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-054a9caf-a39d-4ca1-a329-77fa5e398365">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jfs.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd079d88-78e2-407f-ad24-8fec3bdc2253">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jhd.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0b88c614-83b9-460f-b10b-4f0019b77639">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jhd.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-596f101c-605a-4c8b-8885-dfddafd2e3a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jhsfkjlhjsf.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-13edf67d-dc83-4825-a092-02e52e323e66">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>job.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e12b6e72-f001-4237-9201-bbdffda5d9be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>job.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3731d15a-c87f-4aa0-b9ef-7cbf77779d42">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>job.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-81696dfa-d282-4edb-ab07-72a3d347e7bc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jobs.mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51e89008-ba66-42c8-b94e-59d2eca398ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>johnford985.appspot.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-136cfa01-7ddc-415c-aeb5-2cd7a30e4867">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jr.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-02fbc9b1-b48a-4038-8504-879b684d0f7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>juda.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea589a91-f5bf-4f0b-b637-cfd1957d1f67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>jwss.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2a7e85c5-d897-4c78-82ae-2b2e67b2fef1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kf.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-54f2afba-2d9a-486e-9187-c094e4c2707f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>khoda.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eb822114-c2c6-41fd-afd4-cf26ac090384">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>king-kl.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-88a74ca1-c091-44e9-b94a-27c64e359b28">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kit.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0ac185bb-836d-4a43-b8fc-25e3034b73ab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kit.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22ef8dc2-9e1c-4471-a424-39c066b8a7d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klape.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3b298c0b-23a2-479d-8e44-cd9ce7c95e08">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klati.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-227acd49-c792-40a7-82b5-e3b5af4a804d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klbakerm.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-987b4e56-c769-4ce4-8dbb-131b69ac5310">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klbar.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d79a095-c20f-4318-9bb8-0baaa0bfc18c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klbis.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c26aa8b-2cb5-4e5d-a8f2-dcc1ab376b26">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klbis.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3369586d-b899-4bd1-8316-c06a7be42d45">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klbis.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-25abc1e5-bea6-4258-993d-6338fea9876d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-care.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-44b9b348-02e7-4983-94f1-74c7b1597bfa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klcirf.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-75d4a262-e187-4c82-8ff1-f3a07ab8421f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klcocon.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-90ed9916-ea75-447b-ac35-75233a79722c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klecca.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b606720e-6882-41a2-a9d4-9524013a82c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klecca.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7688a794-5b26-4060-94cd-33f85970f01a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klenvi.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-be771db1-ec9e-492f-b38a-061f0156bdfe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-hqun.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70ea38a5-f7d2-4800-9908-0cf7a9c6adb8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-hqun.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e722301-c12e-4f4c-82f1-e3ba3bac3bba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kliee.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a034c12a-3db9-4d07-88a9-582b37137d7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-knab.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7428ce9a-8742-483f-a034-bc2c7905e143">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kllhd.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9684bfe5-715c-441f-bd8d-4c3ef922ccc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kllhd.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e890164-e66a-4b4d-8b2f-3f4d176247b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-mfa.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-429834a8-bcbe-4d5b-8df0-37a0b0e75af7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klmfat.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b172e990-7ced-47d3-b054-ca3146012ef5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klnrdc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-95b9a5c3-12f2-49c2-9da3-7ac142ce0824">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klnrdc.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-98a3be73-a9bc-4c1d-955a-73166b725920">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klotp.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-686fa76a-f4d3-4cf1-953c-4858cc719659">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klpiec.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c50c3fc4-6eb6-40a3-a976-27fc6a7b68eb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-rfc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f676ec7c-010c-4e71-b58f-7d3c19e0365b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-rio.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-05bbd5e3-244f-4fd9-910f-0c8e884b286b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kluscc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a8acc722-2b20-4e75-bac1-09bdc845fd85">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kl-vfw.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e0384d68-2262-4d6b-bbe4-0e046e98cffd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>klwest.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-445757ed-afc9-4dc6-8877-d038b3eb94cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>knab.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac69fefb-55ae-4636-9618-bf8d51b4deff">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>knews.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24e04c1b-cd28-4894-8896-262d38c50ade">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>koa.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce8d33ed-61e2-4e7f-ac79-4261f84c9f1e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a430efb6-4c26-4c02-bde7-111697d34427">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47d5a516-3d58-4231-9ffb-3f41f2fe6048">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-555360fe-4608-43b2-89ce-8c6f8e13109a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0dd3e884-746c-48bf-bc46-e87ea65a6011">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9c5b381-f1dd-498e-9883-bbb7c3519bca">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3b89b192-7007-49d4-b325-7e25a0b63b9a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.petrotdl.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c6970f31-9a19-4df1-9e53-5e6d0b2ea4ad">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-82281b86-1c42-41b5-a6da-9bf2d9aca96b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ks.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-663b39c5-ff8f-49e5-82f7-2404d16d1113">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ksaa.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c59c8cc1-ac4a-4701-8402-b611048359c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ksap.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9d12d5f7-bc2a-4c76-8786-0e075ef54dde">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kshan.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cf83a488-bbe1-411b-b6e9-f422401cdec3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>kusw.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f7144315-a4bd-4545-8bcc-5dc0000e1e42">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lab.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5d4477b-63b0-4b52-a64c-7afc7d421afb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lan.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b9e3e46e-4db3-41e9-8a97-97d4feb6e385">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>launch.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9013974b-c872-4370-9f2a-770db4c86c6f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>law.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-955adfce-a9c9-4354-b2ad-b68521a4b8cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>law.myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3f86185b-e0bb-45d1-b352-fa1a1dfea747">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lawste.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-500e6fdc-3dee-43fd-aaba-9c7cd43277a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lawste2.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d0b825c9-a4dc-404d-be6b-9b1eaf302ba2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lcan.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e3b499b9-34ac-440e-b7aa-4669195fa7f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>leets.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e56710a9-6809-4e42-804e-f3fec8c2f5e3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>leon.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4967c609-7662-4b54-912f-f2316182f7c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lhd.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4eeb0cb2-5c34-44b5-ac2e-38cff20289ed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lib.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1beccbb7-1f5c-4d58-a8ca-8ef2813fa426">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>life.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dff25bfe-c983-4bf8-beaf-4083b8d7f618">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>link.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43692762-5890-4adb-855b-be019180b85d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>linkup.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fbb32c96-aa6f-48df-ae54-5ce80f0cc936">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>linux.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-89f942db-1abb-48d2-a943-d4fb98cff280">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lion.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ef07ba8-5640-4aa8-bcfc-0d6e59fb5d85">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>listen.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ed3455ea-afdd-488d-b4fb-f2e89b3a72af">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>live.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aac79ea9-51c5-430c-8f71-0b2b90fbe4ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>living.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-98a37676-f555-402a-90e6-ee8c1d388d21">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ln.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f3c0eba6-2632-4688-8a18-2e87517ebd72">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lnz.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c8681a2-9716-4c07-8ff8-3ebfd07cac9c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>loading.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-038889f2-39e5-416b-84cd-07f19ed55e3f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>local.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fb808d61-14cd-4778-b744-b17675186b80">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>log.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-adf0a9e5-2a6f-484d-8561-13d35ca282c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>log.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52414163-fb69-4d12-81d6-fbff30239075">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>log.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e36ece0a-989e-425e-bffc-405ce16b68d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>log.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4c78cbe5-2d7f-4f02-ba4b-925192c2a20b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>log.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-67954dac-1c2b-4b6f-8598-15ffef476638">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e246a09f-0023-4cf3-953b-d0e402208efe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a123543-70f5-4af6-a90a-9fa0dc7d3a70">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f1a98e0-d30e-404a-9d76-6970ba2f72c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-20f58a76-afdd-4fc6-9fc6-5e85807ca8d1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2fff58c5-6724-42de-9def-cacfc51ad636">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>login.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c445a998-bc10-4514-8853-478c32ae34be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logo.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d3346d46-faf6-4a42-b8ef-0e74d4466fd9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logo.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-514fbf20-47a1-4662-bfd6-dc1c3b9782c7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logo.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d5a0d86-4c0c-45ec-86de-66836ff7afcd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logon.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a43f21b1-e22f-40b2-939b-6958572160a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logs.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4b79b259-9543-4f72-94bd-e29fbc29541b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logs.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7d5ec8f4-a867-4f44-81ad-b88d017570d0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logs.pcclubddk.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e8c367c-cad5-44f5-aca9-3812c002ab23">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>logs.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1fc0a88b-c450-43d7-bed9-ed7942e756fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lone.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d083412d-a1da-4769-86b5-08064c389b5e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>loper.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c16d83f3-bc4d-4699-860f-b19e6bb44018">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lost.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4eaede78-add9-4fd3-ab7b-e0ed6b7ec084">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lost.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1ccb097-81c1-4d4e-b8c2-5b02176a33b0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>love.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a71ced3b-a501-4507-8a5c-94266bb3c6de">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>love.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a92f655-5ace-4c46-8116-2e602eda0c8a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>love.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4c8c2869-2c36-41e5-ac25-971092bb49b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lovecocon.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f344d2e-e7a4-49aa-8cf2-bb58c54cb930">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>loveit.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2bbe56e8-f908-471b-afb2-d319016ef435">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lrl.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e80fb3c5-b031-4aa0-944f-a7755b00f699">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucie.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c29644d8-5d69-46d9-9627-b984ad74a283">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45c15ecc-515c-4eb7-a4ec-afa103cb061a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6d0fcca3-c3ca-4147-be24-7668a0bdc377">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c6d66cf-debf-46ad-9c95-83a4293ae775">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a214c36-fb8e-48b5-b44c-eb3f0ed41ce3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy2.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24d44aec-bfe4-4c2f-87ba-3de10077c8cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lucy2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-39ced057-2cb4-4fec-a4de-3929863660f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lw.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b8f7b30a-30ce-41e1-85d9-9de4131f8c42">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lw.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-626043c4-f931-4ccc-a4be-36da43b2d543">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lw.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-caaae39c-df12-4e8e-b735-37009f8c2672">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lw.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f5653eb-24ed-4620-9e71-13b34415ff82">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>lwave.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43536120-8ba7-461c-8c7e-c67f95a29e29">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>m.cslisten.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c0a237d-879f-4162-824c-7bf6b3b6259b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>m.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85aa38f4-8139-4b1b-a07c-77673dabc673">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>macfee.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8b1f491f-6a75-4b3c-bfcf-7bedbffa7bd6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>magazine.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bd76f3ec-524f-4f3e-ad4c-df4ad2f23289">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>magazine.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-99ba6ebc-9482-41fa-852c-50f465129285">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>magic.tfxdccssl.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-220b042e-4d66-4e95-9845-003fb8db8da8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-59f9ad90-4e5a-4233-9b3d-164000fb646c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-57277a68-51fc-439a-aaed-2c7eaba7be0a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ae533b8e-8e45-4d93-b8fb-ac5e6d1e65d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5615ca04-6bdf-4785-9571-173fcc596e91">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-66548a40-b7f4-43ea-b669-ad1dfbccc6d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f3ee9bc-4398-49bf-8b0c-bc97c8ede2f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85ec95e6-c561-416e-a4bf-c67b8e7a6c27">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ad70666d-45fd-4bb7-a4b3-63eb3eafa908">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d001d317-514d-413e-9404-98f174bfc0d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a4bd5b91-e759-4e0c-b379-1324237d29b7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-36f004b3-8489-45bd-8fdb-21202f063641">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9dc4d5c3-777a-431c-9e35-d8b9a7abeed9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1fe65795-8f41-4797-a9dc-ddd8ec6056f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-25502b29-4f52-4bf5-8856-8bf260e1e976">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-048bc6ef-aae3-460c-92ec-4e10bd2e603f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2288a44f-5143-4a54-a065-5ab0898cf40e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-001570fb-425c-4552-8359-f1bc249163b3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d80e3e0c-ceec-4d16-8aee-148e08eb67d4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-186fe54e-e477-449d-8d0c-a6242b04f77f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-282c1501-8ab8-451a-9fcb-acf0b709965e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-53dc6938-feed-4954-815a-087afdea982e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c7dcc63-650d-42e8-a415-e486d857e0df">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7a2930f7-10a2-42a8-bb1b-7fa5dd76a6ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1f20a339-04ff-4f45-a88e-fe7952157413">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64aeb0c8-b989-40fa-ac2b-267bdb241457">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.oplaymagzine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9eb591af-1a3f-4dee-bc92-fd40d0a7a287">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26066c12-b32b-484d-a516-cd08ae89eac9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1fe86ac9-83bc-4381-b4e4-d40a13ab57e6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ee535342-e694-4dab-a0b2-ed747553daf0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-323dd720-72b2-4403-8306-cfa406ff6daf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2f2adce-33bd-4d46-a17b-6e9a675f6c74">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-61e78e69-a676-4b4c-8e15-f5b3b0877ec7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2609656a-8d23-43b9-a5a9-d19b77b90b52">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c5e9ef4-301f-48eb-babb-77d30cc9eb0b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f487bca2-c581-4d4a-8b09-5ef66e66476c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.ustvb.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5367a90d-6985-4685-b500-58911402549a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5711fac9-5286-4787-bcf7-0037e301f5a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-06e0395e-07e6-439e-a459-549ff7060964">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mail2.syscation.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4c4f498c-f000-4d4c-8210-cf9804010a91">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mailbbs.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c343c72-48d6-4102-a811-5ede370b7095">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mails.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e919b8ed-b270-436b-bc42-727d8cd530dd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mailsrv.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5dfec5de-3673-4ee8-a389-2899fbfcfe68">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>main.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f728a017-0a58-4e55-8bfd-57625249758e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>man001.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-11a13064-a81e-495d-956d-4c22155df53e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>man001.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15630e88-01e0-4b41-92bf-95ca2a1c5be5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>map.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de119182-c086-410c-8757-9dc54ab9e155">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>maria.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6d3ca664-c1f5-4493-acfc-d1566af36111">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>marines.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6401919f-3634-4393-ab1b-805ab3c8496b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>max.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e1c4f8af-4479-45d0-99b5-2e9da13a4def">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mc.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-44d7a9a2-b89e-4243-b0c6-b238b3f555d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mcsc.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f451bfb9-11d2-41be-a65a-b19f1b2d0946">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>me.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bf261aa8-3d5d-44d7-867e-170982fdb0cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e7a4c4fa-756f-4414-b487-d83be5189b75">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c9a38f67-fb50-426b-8144-f0c2bbabd20a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-198869b3-3a73-4882-b759-14283fc3871a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5098301-69b4-4a80-9e7b-a14ccd475814">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f21d91b-349b-44bd-b20d-919c6a5c0f9d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9cd5e822-a31b-420c-8c75-13a79154b7c8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c85b34eb-2adb-475e-af46-e2808d647090">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>media.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e2b6cfd-c928-4011-91eb-f191af6fd69a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>medicine.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5021d66-77e3-4b40-9f98-47f9fec6ba90">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>medicine.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-caa94bb4-ec32-421a-9ad2-04a0109e2dcc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>meg.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-940cb911-eb7d-4360-a544-854c34f325ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>meily.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9cc8aece-3513-4b56-8bdd-7da5d41e63c6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>memberd.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0afafbe0-b251-4021-9aab-28d4107646a5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>message.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c206abd7-f433-493b-ad42-74beb96d8a2c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>messenger.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-02157474-6434-46ef-ae5b-f9eb4c088769">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>method.ns06.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e0990d3-4b44-4936-bc9e-f9cad9fc925d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mfa.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-857c40c8-b1f7-45c1-9e3c-480becd36503">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mfc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50296ef4-7a3f-4ba9-89bf-21848bce45ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>micro.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72b5dc46-0a2e-4969-98f7-0c800028e921">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>microsoft.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-275bc3eb-700d-4586-b410-df31f2320a02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>milk.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5bf8df22-5536-4d4f-b468-d6ae3a5a099a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mini.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a683edc-595b-4573-9212-00b3d7affd78">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mint.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e00ea103-67d7-4380-a87f-f7d315a7c86f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mko.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f2331f83-575a-4785-bfe8-7a9e7dec65db">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mlls.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ce60742-6ef6-4daf-bc17-2f7791c58f5f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mobile.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ef068cb-2dad-4417-ad93-7e88f916af5e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>money.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b0e8b81-887f-4352-bf1b-6bd6574faaf6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moon.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1dcd9c1d-833d-4f15-9f28-9913e18e140c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moon.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-258bd94d-e76b-4cf7-aafa-7728f7497e77">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mor.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5f6e8183-d6a9-448a-af76-d1f52cb7c4c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>more.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-92d410a3-ae57-4746-b60b-dd02486dcc66">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mos.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f772ca9a-5426-4278-a444-b1b346391427">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moto.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a678d65-b45a-499f-95b7-58ca2a493768">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moto.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3590bece-8d5e-4b6e-a88c-ddc4ceb3cf72">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moto.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d62eb82f-269b-4b0a-b9d1-aab9547eb501">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moto1.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1678ea0-29b4-465d-b3d6-863941bb7026">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>moto2.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a7a67ed7-1a6f-4349-9e48-27032eaa27ad">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>motoa.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f60e8d9e-8f42-442f-8a4b-8b7ab0b4d732">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>motor.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-350aa4b2-948b-4a27-8837-f6cb41f4d218">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>movie.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-247d215a-c007-43df-acd2-e5c8424eca2e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>movies.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8268a913-307f-4674-bc55-8ee7ffa48df7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mpe.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2690afb7-73dd-42ab-a374-7c2dd5fe3d49">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>msn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-48941e55-6156-4db0-b03e-16eac95b0281">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>music.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42aea3c5-dd96-4394-91fb-045cb69a232e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>music.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5e391679-738d-4d13-b05e-7a527f28891f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>music.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f35f5971-fe1a-4831-93d6-e3cb0a4227cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>music.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1e73738-824e-4f2c-b724-db62e1cde5f3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mx.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd62e19e-60a9-4a7a-86b7-e84c53942ac6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>my.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-86a450f8-e162-432a-833c-9e0f3410b4e0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>my550.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-238c6bf9-c811-4455-aea4-70db54f38fef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>myfamily.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bd5a7414-ad43-4049-84e8-2110fc6b8c8e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mynet.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a0eb8866-b10a-4a82-8f02-f19f884a4364">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>myoil.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2c18872-9994-444e-a36c-06e59099d51f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>mysql.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5792015-40c1-4f55-b559-2392e4d1abaf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>na.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-847e5fa0-6e9b-45f0-a300-8a4d2e1aa8ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>na.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31dd52e7-7cc2-4c81-8f7e-03841e12c254">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nat.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4fe6e90c-d128-48b1-ac2a-44bdd3f8f038">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nature.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ffcb19e1-ad52-446e-8167-b13ea9bb3081">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nav.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-96b72598-bbac-40a8-b05c-5d7d7e034c01">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>navi.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6912420a-46f9-431c-87f5-a9a7a2516fb6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>navi.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d160aea3-56c9-47f9-8647-edaa62a25dc3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nci.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-68b0f5bd-f613-4345-92d6-b30060239c1e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nci.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a35c8f9-4469-4e9c-b754-26183200b27f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nci.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b5cbff7-9fea-4de6-86b0-e61662a2ad7d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ncih.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ebbccc26-b482-4042-910e-a6ebebab61b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ncsc.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85201fba-0ee0-4019-b25b-500ee5fe2ecd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ne.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1516d7b0-3949-4528-abae-b5da8e458aac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nes.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7bd23b6f-fe01-4665-8eb9-926f4153cf25">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>net.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f52dae3c-0af2-44e1-95b8-495c96dac233">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>net.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b373318c-17a5-4313-afdb-26817ef41bf8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>new.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-594a7bda-efcd-43b9-98a0-db5440f19bb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>new.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db7ddb10-7bd3-48f2-9087-cd450a987d2e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>new.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af23070f-08fe-40f8-8ba0-d555e535de69">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>new.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e29d21e5-1c10-4e88-84bf-89dd6ca02a3e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newport.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5916e96-f2c1-434d-8b0c-a4c43fffca3c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newport.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bbc7e2ee-3d22-4b97-9838-c1634a8c858b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newport.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d21baa87-cd57-4b33-9701-8820e78bd238">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa770228-f05e-4b11-b76e-a0d76d2687d4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e258030-c6b6-487c-baaa-e59ada022cf4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a132b97b-5018-412a-acd8-85b5947ed643">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-97a44d80-79f2-4d55-a28e-de8a7d1ed06a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-851c760d-be60-411c-94b8-0c565372b112">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42766ec2-33c4-4e25-a564-e8412690cbbd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4963580-46bb-47d2-b0a7-cfe3ca3d2719">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4f49e2cd-bb4f-46d5-89cc-b641bded940b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30298eb8-9bd7-4843-a7cf-5788d23d673b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5764041-34f0-47cf-932a-7b6c337758b0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-57605a4e-55f7-497c-a4ad-74e8dbdc4110">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ce03c0b-449f-4f7e-8ed0-e7fe6a2cd251">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5dfb56ca-3e00-4813-b338-8f0295762cee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7df52184-15fb-4e60-b3e8-9342934c2030">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e8109aa8-32c0-4fdd-9f0d-9f8a2ecaf8a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0362bc0b-9071-4fc1-bd11-20f71934779c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45499204-e247-4bb3-b293-383ef2ed5214">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c0da5834-fabb-4828-bf67-04767a75be83">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-83eed083-74d9-45b0-adf9-8f8f501e2f43">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-722787f1-a5f1-46ad-afe3-72e2e39e5b40">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1e0d8495-e870-4acd-a2c7-07e02ecfca7b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e97a7164-3930-4727-a8b1-3885293dc620">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0edca435-67c9-4276-85f6-d70835412d0e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0829d85a-9e3d-42b7-b70a-18f9089cfad8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-66fd13fe-d536-4595-b5a8-db5141655f48">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5d34f27b-6d63-48e8-892c-0031091e66e2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a0aa396-7f82-4c20-9575-c29d902a14bc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af7cb6bc-a782-4cd3-8d3c-03a524fd7343">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cac0e6f6-f84d-415d-a304-d580727265f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-936a7cc0-e703-488d-ad5a-bfb7d76b1257">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e700212c-fa96-4314-aff7-c7735691d954">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-82b36aaa-dbaf-45de-ac0d-bfd71a9b1fb9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de577001-c2d0-4d93-a9b0-4459ab40d2a3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8ca05f6e-69c7-41b1-b21f-30ab422d9f50">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bc5cafb0-b339-4439-9ab1-0fbe01554cd3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d7896aa1-90ec-4468-a157-e3c8e47ab93e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.pcclubddk.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e93d557e-3a4d-4797-8049-e20a25e1944f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e0eea3e-9291-49e7-983c-979debdc64f1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cbf1e37d-1934-4299-a125-82d3b468ec78">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ec054352-2d21-4038-9746-519d4128b98a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6c651c81-c969-4430-9198-eb2d635c478f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-731e78a2-f97f-483c-acdc-b75fc65daad1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b51ca6d6-f99e-4e5f-89ec-0e4616d2c938">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f01405b7-1fc0-46eb-b2d5-9ef628528ff0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e8d1ba75-1126-4620-bf0c-e961cfdaac97">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7087c371-52f3-4454-920e-ea1682dcf260">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7433a2ad-bc55-4a46-a76f-a45b720e280d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2b64288d-2db3-495a-89b7-2f3c26de6669">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cab541c3-ca8e-43cf-a5ce-317704210393">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eaadc490-2513-4082-bb52-f3fca7c146a4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-02a7795c-da2a-4ce9-8d56-28318cfa4c67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.yahoo.com.conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cd55ac64-345e-4a17-8807-bb2923155d47">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>news.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e8c8bdf5-b54a-4cd6-88d2-83690f739471">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newstar.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a90784d6-a930-4b5e-8935-bba813043067">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newstar.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-714af4fc-55ee-46d1-a40a-2921da3e95ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newstime.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2e276fcc-e3ff-49de-8251-9151d96e4cb6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>newyork.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-738fbe58-82f1-47ec-86a2-f6da9dfe6551">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ngc.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ced86f4f-307f-4be5-9f93-645af1c5d547">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ngng.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bf44befa-139e-49d9-b344-2034c4e4d5ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nh.microsoft-update-info.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-acedd1dc-587a-4e60-b3d5-fec80a7813ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nhc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-78946a80-03f3-49b3-8585-c2cc9c71a53f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nhs.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9e34f6b-d4ab-4c0f-a363-fa88cf8c8d34">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nhs1.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-524b49c8-f858-4f4f-a21b-1ff156d920fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nhs1.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a4cb486-0fc3-48c1-9710-2aa3505cba1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nhsl.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-40d0ca2e-3863-4cee-981a-0c533204feff">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nic.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7633dae9-3fe7-4605-ae44-218ef7077b39">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nicenews.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2a3359ab-4512-4676-8038-7f43592613ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>night.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-23368e91-3b33-4339-84ec-9a3ca2c8e86d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nis.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f5c1982-97f5-4cf0-be0b-1c87249a5888">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nl.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-caa21784-1fe8-41fd-b4c2-73d1f7e6a37b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nod.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6274b1ad-9af8-4b6d-9d21-a6a31abe0d40">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nol.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-83826798-8147-4c3b-9674-60744cc85f55">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>norin.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e3a71f2f-dde9-4cb9-99c3-74dc6c7693b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>notebook.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d001f326-e239-482b-b58a-4a007132d3d6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nousage.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2b19613c-e2c4-42db-a1ff-6972d767af7a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nrfn.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e7f9bcb6-16fe-4735-80bb-128c8f2c2a8b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ns.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-428b193d-d64d-4624-acb8-b2fd9f45c6c0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nt.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-47ea7bc7-91d1-4bd8-a888-8543abf0bcd6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nucor001.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5bc5d6a4-f12f-449b-936c-196838dcace8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nukor001.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3bcb04ac-831d-4138-8a67-1f0e53d79d30">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>nullmx.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6dc87e6-e9bc-4ee2-9910-092488ae5958">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>num.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1e1979c-832d-4948-b567-a84ad716ee0e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>o.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-294d9c90-d58c-48d4-9e1b-3f8bd76d75ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>object.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-872ded36-d5a7-45ff-af8d-8cd541123b8e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>office.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-501867db-8816-4d14-a608-41d9f55b9f72">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>okie.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0384e361-7aa2-434a-a65d-c7513f1176fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>old.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dd973dcd-975d-43ff-abe1-061c8bbdaf31">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>oliver.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e36fcc30-81fe-4939-b594-465c1d83aaf6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>once.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-24d13d8f-b260-47c3-809a-cbedcdcac3bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>onk.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a18683db-652d-41e2-acc2-175ec701d5c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>online.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fbba43a5-0eaa-4d70-883a-00b28c98f57d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>online.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-62633eff-09e0-4f67-be1d-03fe51908f48">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>online.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d8f0745-002f-4b43-a945-82fa96379a45">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>online.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e464c19-b17e-430a-be59-68dfa978b46d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>online.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9ca7e3c5-649d-4a99-8ac0-76b34d67ea66">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ope.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-34359835-45ea-4760-81d8-8a3d816a5563">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>opp.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d04bddf3-1e80-49a9-a55c-0d37c4e3cb86">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>oppa.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c0a696c6-2e39-4e23-a772-30fc293fb37c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>opts.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-69e680e8-be30-4aba-ba79-a18aa6f97d41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>orca.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ed1d3924-36df-46df-ab5f-37edf3aae260">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ord.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22ef3c0e-90a4-41bc-972d-883644264abb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>orient.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6de3d635-0dc5-400a-b943-e6ef6e2a5712">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>otp.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1956e10e-b072-45b2-862f-c995bae4e9ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>otps.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b15975a5-e6aa-4f15-bcb9-605a73bb4a4a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aee83065-6aa2-477a-b991-30cf1296d73b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou1.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e6cd14f5-7705-4bbb-8ebf-084350c3b555">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou1.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f355fcd-70f0-4cb6-9b09-976d3da06b17">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou2.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-94185c05-b0eb-40c7-840a-40e3de74795e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a45f481f-90ef-4ff7-b15d-df2b68f03341">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou3.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-657a472b-a7b3-471e-8d5a-ba9099dc892c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou4.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22a961cd-bf0f-41c3-ab80-59d21cddcceb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou5.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f66301b2-9b0c-4a71-9a9c-58fd6d4202e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou6.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-69f79825-2550-47d1-a317-f3420cb58844">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ou7.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cc968a72-7634-47d2-b3c1-9bb7db996730">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>outlook.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eb47b78e-b83c-4b7e-b41f-dcdb54efcdc2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>outlooks.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-374f1815-8d9b-47ac-b4a3-1e41866a646c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>owa.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac56b06c-eb02-4dd6-99ac-b325f60072e4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>owa.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e428a91-52ef-4fa4-bbe1-6c75360b3c69">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>owa.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dab6d6ef-4d57-4b9e-8cda-c5611bd35e25">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>owa.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5efbf77c-8fee-416b-8831-ce69ed84a48f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pacific.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e5da9a20-8c18-4c0a-89c9-647bd4be904e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pacific.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-89462dfa-73b7-4d6e-9242-6ef9ff55fee5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pack.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d90a24ae-3ec7-43d0-8395-9bbb4fd3f23f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pact.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b0b802a4-3d85-448a-a660-28f784096af6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>paekl.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd80634c-68b4-4ed6-86f3-7a6909a0c549">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>papper.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6c9f47ed-50c3-460e-90b7-db9a99f6be0e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>papper.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f344afe-8d87-4b6f-a859-9dd7a09358fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pars.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e87620b7-d2fe-42cd-8d1d-986ab57b48cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>part.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-38dfcb1c-1e72-4737-9f1a-65e12edd4a1b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>part.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-46557827-11eb-4056-96b9-f9437abd3452">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>parth.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31997e2c-9859-4a44-88d3-9e2fa2b6d4bd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pay.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-10e013a6-c646-4629-aaa0-568f0deb9954">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pay.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dd32f5fc-5e76-4cf2-9057-35275a84f556">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>payse.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72f046a3-d3fd-4593-8a40-8f4cbd06bbf3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pcie.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e3522875-e84e-410f-a957-17c10feeda99">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pda.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dc75562e-82d1-4940-902f-ce1e48340ca5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pda.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8281882f-dd9b-4d37-bad4-bd3103314bbe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pda.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d4246160-b5d0-4793-a95f-cdb0357ae7a2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pda.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-07b09a8b-cf49-4809-9104-b16b6030a9ab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pda.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04f970c3-ece7-4803-b5ed-22469d076229">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pdoc.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1630ad62-e57f-4d6a-81ba-a00311208231">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pear.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74b7077e-d785-4b5b-accf-a8fd109f2c9b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pear.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4990d021-46a8-4055-9d26-4d880b8754e9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pear.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9aed7778-9f49-441b-ab2d-b8a87d71d071">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>people.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a6bcf6f2-08e1-4aa7-8467-5e0fd4cbabd4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>phb.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce15c6ef-f673-43cc-8360-67fbafcd40bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>phe.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3d9d9e5d-f73e-49af-9824-3e4b8d5e5bb4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>philippines.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f0f483eb-b6fc-4baf-8971-47c389f2fcfc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pic.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a5f5f897-6c76-4427-9304-fcde84f61174">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>picture.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f9d84d1-9a3b-41da-be0c-127f3c8658eb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pink.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5b5812f0-0156-4f7d-8ba8-39523d9428c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>plane.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-efb6cc05-9d54-4993-9fae-37378144439c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>planning.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9839962b-152e-4796-bd8d-52cf487f60be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>play.conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b7f5d2df-122e-4ed2-b6a3-ce9c95966253">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>play.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d17275ee-a8c0-406f-a2b0-b57672885090">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pme.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0fe6e8ab-6188-4d4a-befe-fcbf3ff63431">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>png.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-66c2a2ce-577f-4a6a-b829-f55532690b18">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c8476bde-f5d6-46e0-a6ed-fb4d37fe3638">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-60d75946-99f2-4e57-9b69-3379228961fa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-217abade-1626-4ed3-bc23-f25d39121fe6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f55d8859-8ca0-4649-bf4c-9551b0eef96d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-880c3bfe-386d-4132-8a85-505bf1b9d8cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f9b33a0a-13fb-4e90-b4ae-0a381dd8a44c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-164f02c1-301e-4f4c-9612-5d25b9495cbb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-86dc9c5e-cde6-4ca5-bc83-5a4cd5a8c19f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-607df536-3509-4d2d-925a-25d0097847b2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51b6fa46-be3f-4662-b7dc-ba8749f5d7b2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-873074b6-4c28-4a10-b6e5-b7a66ff52ff2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-86583abc-d72f-41a7-9634-4c2e77b6d9b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d28e9fd-b5aa-4fce-a05b-c58bf78d97c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5df577ea-6179-42d4-b89b-b2b3766a88fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c0a11d3d-dab5-4942-b558-60b1c8f2036c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-38e7db09-e693-4c29-a1bc-c569ea336999">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3f1d5e06-1564-4db6-8938-62b724ab6443">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b64f3634-4b8f-4b15-b78c-257d79b4178c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d63d1fa-9f39-4a3f-ae84-ffbc6ff20aae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-074e7280-7b5a-4d7f-9bb9-59efa66778b7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9a396dff-0c0e-49b2-abc3-25ac1e7aacf6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0201329f-683a-4b49-a077-f4858b8e9770">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1e4e513b-0d08-4e1e-9bf7-6e220dfff658">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e3e5a163-3f00-4de6-bcf8-bb6100c62114">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43f24e9a-8515-40fa-9ddc-536be057b1aa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fc44262b-ad57-40fb-b6f7-bd5172b03c99">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ccb93488-0531-4a83-a00b-1b40701545dc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9298dab3-22e4-4048-9687-bc805fd45003">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09f744be-6c2d-462b-b20b-acf49ef4afa7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f88705d-5b56-4289-a9f6-2b6694ffc2fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-34b92854-577c-4fa0-97f0-dd776f4ade6d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1f323922-93f6-4307-9098-b1cff2ca2437">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop2.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6125b09-ea43-4268-b49f-39c13556c6f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a45b0b32-1391-4174-9e15-b693ac3d57f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop3.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8ebf9d72-9347-4a84-9f35-3610b858fe47">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop3.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d5cbf592-82b8-451f-a9e0-c677b37c16d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop4.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bc5571de-c21c-44f7-ba19-d18c2820e58f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop5.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dfd1a33b-b601-42a2-8513-5c1d1cb157f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop6.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cd3405da-992a-4b08-8807-cad3df962a81">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pop9.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3c406790-cfcc-48d1-b979-3a93ce82c001">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>popw.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f1ee934-80b2-41be-914a-6c14e71ff42c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>popwk.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ab9fff93-ee63-4c61-afc5-cc69487e2921">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>portbab.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d2f0cf2a-a3fc-4868-92d9-e8eb911b3ae4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>portpop.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1c64fe4-1988-4bd2-9174-bf654b37e85d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ppt.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-21f92e1c-3864-44e7-931d-6f0bed5fa350">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>prc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-35c14af4-11a8-4071-b443-c85f0fd9303b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>prefix.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e47af18c-dc57-44fb-af91-da23c84371cd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>prefix.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c719a792-1e07-4a87-a39a-7c73aaf6c177">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pro.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9eb72be4-6f37-440c-b1ef-c16cda0e1867">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>proc.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c654ebba-48c3-422d-90fb-86fd23cf123d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>proc.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cd374b7b-9f5c-434b-8e2e-eeb335ac6443">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>product.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1f6fa892-db24-49dd-ae5c-31c92a7658b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>program.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8ea71ea5-5293-4cca-af85-5cb02021bf1c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>progress.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e1174198-996a-4b58-90ac-a45e7c9b0cd4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>protoc.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-84d991f6-08a9-4969-b853-2860961a2672">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>psp.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0439ae7a-563d-44b7-bdd6-7ab93989682c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>psp.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-14c3d08d-db63-4f26-a9bd-17e43a40b605">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>psu.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9e738933-31bc-4dfb-95cb-df23188d87bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>psu.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-778a2920-7477-4384-a976-80851ac79f71">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>psu.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ea23fe9e-fc26-4804-9725-68a213c2f314">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ptp.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a518082f-cb4b-45e5-b867-00cf0ded748f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>pz.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b2a606d9-d01f-49a7-899d-90db435e4364">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qedh.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-800421d8-afc1-40e6-9fa9-89b1ccd90403">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qhun-mons.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9b380493-5b94-4221-bb18-6265a73e86ec">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao1.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d9cd6c0c-26c8-4598-a239-442151cd9575">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao1.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3b61ec88-9a1d-4fd5-aaf4-ef7480f6edc4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao2.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cfe47cd8-430b-4ba5-903a-f9c3ed8a32bc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao3.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-09e9b1c8-a8db-4955-95dd-6e6dc9867094">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao4.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7b4ba124-8349-404b-bcf2-9744e35ea75e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao5.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-35607b4c-dacd-4414-89d4-cac0c8f9afab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao6.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c45d32a-9546-4e5f-b96a-55b288460817">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao7.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-49f1eb16-1052-4699-bc42-9247f9337b13">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qiao8.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29709e95-b991-4055-bd7b-fafde4fded9a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qua.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-69767154-57f6-4134-8d8d-81bc00d5a2ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qual.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e1861784-87d6-4b8d-bb6a-703a34ad25d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>quick.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55caca65-38d4-4af8-af58-be4d977b9e71">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>quiet.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dd4f1814-d047-447f-883c-49dc74f052cb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>qusc12.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e3033e0-bf10-4418-b591-7a8c25e3b115">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rank.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de218acc-bbb4-4217-b1c7-63a1d2898179">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rcs.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cfe7cd0f-29d1-4d75-a94c-58de9dfa1d7a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>reas.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c25d3f2f-fe3c-4cbd-a3c2-0673975f7784">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>record.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fb7d1d90-ef08-4ad7-a67d-b91bae2cf0f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>records.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ca2232e-bd11-44a8-895e-713a96605f48">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>red.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a6c7d4f-02ba-4f92-9eab-fcae37f608ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>red.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55096c21-05f2-4dab-bcef-adafb503325c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>reg.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c7a4758-a8ab-4155-9eee-422ec3105931">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>release.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4ac195c4-75c3-4caa-b636-cff9462c8ca3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>release.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7f475e13-953d-44bb-b68e-c870cd058dac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>release.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a543992-c53d-46d0-aec7-f81971f00f36">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>report.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0f2685ef-9a7b-4011-b3f1-d321a64f875c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>report.regicsgf.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c1d3c23-34eb-4a92-ad01-cfb0c5b1ac76">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>reports.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4f69088-c2db-4cd9-a1cf-bc68bef4018a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>research.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-76c4f472-158f-4976-bdfd-0350a02736be">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>research.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fca7dfde-71bd-4c84-86cd-fa4c475bded2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rice.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aae541e7-d123-4f1f-9807-2840f917eb8e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rj.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9430e11a-1e02-4776-81da-ce77fcc1e107">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rj.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f45e1c3f-c8d1-4e85-b76b-7e8a3e7ff697">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rnew.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-16e8ca3f-a71b-47fd-b91c-7d17b72a5f6e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>roger.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b480836d-b1d3-4fb0-89e2-6d2de598ea94">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>root.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-28136330-8e20-4821-8dc1-9635d315915b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>root.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b591d26-f275-4caa-8681-5d4170064222">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rou.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9d2cb439-c498-4300-9f04-469c131f4b81">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>rsut.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b054b619-7897-4ca5-8000-e16d6abd33ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>s.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8a9b2cda-76f6-42b2-bab4-7b70533f8c61">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>s.microsoft-update-info.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-67a890a6-16ae-4606-9fa3-e00cb8020fd4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>saf.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d78f7039-3267-459c-ac1f-e1b47c1bfc37">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>saf.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-10453f1b-11a4-4640-8f5c-c66f54953d21">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safbejn.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5daaa444-85b3-4f07-bf71-04d81c8f0a47">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safe.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3b8b298f-4038-43f1-b694-c41456d340f1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safe.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55fdd10e-69c9-4072-9c72-0bdf7f24ca2d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safety.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d26b724e-a64b-4c77-b356-141b8e1ffab0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safety.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b30e53bd-fff2-4b0e-913e-7c32a3b46c5b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safety.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-91d04a57-2327-4879-96dd-ec9002026b09">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>safr.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d16fe3a-5d28-493a-94bc-800b4e804d1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sale.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bbe3e5a8-b25a-4d85-a5b5-3ba2346349b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sale.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b58df2bc-c3ff-4748-a74b-ec778a20606f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sales.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af1f4061-b18b-4de5-be11-1494d92fec55">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sam.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eebcecdc-07ec-487e-a5a5-5aa1a6bfa3d9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sam.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d47a9874-d402-4b41-b890-96e1f17d0977">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sam.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-38ba6581-1a0f-466b-a7ff-68e09646731a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>satellite.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-23385f9f-07eb-4001-aabd-2e47676b4c73">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sauu.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-122b222e-4ecf-45f3-830a-1fb3af954987">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sav.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30437403-80ed-4e91-9e95-91920bbdde6d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sb.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9038ddf-fb26-4fa5-bac6-549cf35020b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sbh.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ef82fd48-7341-4c1f-9eaa-e5f07089ebaf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>scc.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-662a3049-59f4-49a4-9e21-fbeb60fb96cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>scc.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0d1490c2-9dd4-4e40-b42e-d38adb8eb19e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>science.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-526cdf11-31e2-410f-9004-a1e480d21140">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>scorpion.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a15c74ea-8eb1-4bf6-8ff4-278ea8add14c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>scpkl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ff4c9df0-c0e3-4cfb-9ee5-39eb443fc613">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sea.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6deb92ea-faee-4aa9-977d-063912beb9c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sea001.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a20418b-3094-4103-9b9d-2fbc17c3a555">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>search.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e3157d3-c2a8-4ec9-b4f7-691fe84d58b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>search.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15792ab4-5c86-42ea-889e-33ab07b1dd00">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>search.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4e0505ae-aaca-4676-9698-f7ca8e365e46">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>security.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15560634-4f8a-4226-915e-1af04228a3cf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>security.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64a7db78-f85e-42f0-a78a-d9ece53522ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>security.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dd88dbd1-74cc-462f-b723-15c0950ea45d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>security.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5744f8a4-794d-44ab-816e-eed3416fe053">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>self.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c23774b5-4de0-4285-8c97-49f2f9dd0424">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sells.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0980ba7a-2fe1-4426-83ed-b1df8b9da0a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sells.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50fdb903-da0e-4c89-8f70-9a4402762828">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>send.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1419d853-078e-49fd-80e7-e3d446f1d0dc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>serv.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e4f33799-b308-4ccb-9930-f07cf848f44f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>serve.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9553f3a8-4e15-4333-bb1c-b04594c87056">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>server.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6cd138e-6e9b-489d-bf41-228b9bfdcf59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>service.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74f96db5-503c-486a-a626-221758fcc6f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>service.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-58ed9391-38f8-4d9f-890e-e8ec8719deee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>service.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bfb06cf8-92a3-4139-8b0b-fd14f415f098">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>service.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eeefadc4-9cf3-48df-b2b6-2b87be274de0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>service.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-512e9a71-9ab6-4ea2-b885-2c894e2a46b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>services.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-48359eba-8465-4ba7-b9b2-5d1d562f51d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>services.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0b5cd508-d1c4-47bf-9d77-3e7dc1cbad7f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>servmail.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5ff685d-85be-4502-9430-4fd7ee140969">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>servmailb.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca68c9c3-b324-4b65-8634-f162bd8b456f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>servmails.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a32dd7ee-318c-48d2-8f35-76c1736045f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>set.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9b8e710-87cb-4e30-8ba1-45b2ec122bac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sfn.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d20ce01-d634-459c-983e-9e9faaad9d41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sh.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db25d033-88e6-4038-88d5-aa1769e42973">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>share.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-00d00375-ac92-4b15-ad51-324707f0d43c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>share.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-108e5e14-7044-47a2-b118-3067a0894c8c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>share.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1a759da3-22d9-4aa4-a448-f76568edee75">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>share.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-616a6086-425a-454d-ad51-da28da998505">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>share.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43446c43-604b-480c-86af-89112cf80e14">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shit.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d652cf01-2ddc-4df4-83dd-b2573539067e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shop.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-65f95741-f449-497e-82af-48255294a3f7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shop.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5f792381-b0d3-478c-99a5-6af326dbdb06">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shop.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-800629a0-d641-416a-9c3f-c36c6e0f6f44">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shop.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6cbadaf4-6cc3-4cba-8666-ffc76f644527">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shop.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-98967501-aa1e-432c-bcdd-1f63a9e5c0d3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shot.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-587a542b-9b9e-4460-801e-e8273b554a53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shot.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a49fb7ce-ffae-4e87-9aea-b789f75fc67e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>shot.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f0457ea6-36a8-46d9-a907-7f8df0879cd1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sifcc.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a0db5698-3ddd-4898-af56-b7db34ed5f02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>signal.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b718bceb-f140-452c-8e4d-2295b841b476">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sinbg.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e170b115-6970-4880-b11c-265f1033039a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sisc.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-342be64d-f87a-4a66-a783-1293cc3b4223">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sites.progammerli.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7dbc1821-57f1-49bb-9ee6-27ff9b7061ed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sk2.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-57f3d705-d01d-4a9a-81e7-5cd9b1f96dd4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>skills.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3946b564-2c8e-4b44-8086-2d2138394130">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>skills.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-384f2553-1a89-4005-802a-9f6c4d360b2c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sklcenter.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca7ea5a5-3330-4602-ab68-ec0317cebbeb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sky.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7feb97fd-e1e0-4f79-b847-ac875952457f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sky.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d76fa136-cb47-4b8e-9f9c-135a41dd108a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sky.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3bd702ff-23b3-48fa-9fee-934557e82d20">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sky.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9089f8bc-9c1c-4341-a5f2-b1f797999a4a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slnoa.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a7d212bc-79dc-4626-9d3c-512418c7985e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slnoa.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6fc9842-b2d5-4502-9ce9-f62a465b34b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slrfc.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eae3209f-5f48-49f8-8287-7d97c085a6de">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slrj.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-76fa66e8-7304-4dd6-9655-af45933df86d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slrou.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b5d4d10-6d9f-4e27-b324-03918cfa01a7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slrouji.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a574f9b9-3e40-4c6e-b115-57db6b8f861d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sls.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6c7022b-bc2d-42da-901c-bf7a37dd44cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>slutc.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e5a7d8b0-dbf4-4f73-8918-3b0cb5780632">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sma.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4d42f974-a888-4954-aead-7ec711beaa5e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smile.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b2bd05c1-eea6-409b-911d-86b83a868bfe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smlk.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-01de2b3f-31bc-43b6-b87b-5456fb0ef361">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smooth.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e78e77e5-283e-4c95-856c-b9e00f268152">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-020139b0-a7ff-4887-9484-d98c18e4f815">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-884f2202-16c6-4d4e-afc6-2f0ed7429fac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a9865857-52a2-4507-bb04-0624dda2e684">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4feb9c8a-3b07-4554-95f8-9e53889182fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7a54d484-1e91-4a4b-9dca-1794c33c2dd3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ede72198-8288-4497-af35-40141a91304e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31f90f3b-6d93-4462-ad21-4f9609865c18">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-73502846-b845-44bb-941e-60a0a2763738">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1476afe5-f7cf-4e1a-bf05-1f2686153837">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-21b05107-d22d-432a-b3c3-1faac0599b08">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3eba0d5e-656b-41e5-b853-cb23d589b820">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b60dcab8-1686-45e9-b564-0d0686031074">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-257ac575-52ff-4735-ad81-beca08520639">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7de2ad59-552c-4289-956a-92d7217b74fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1f37b3e6-405e-4fa8-a496-9535c3b15edd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-784a9b1f-0841-434d-aa97-a73c24e39ff8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5453c021-28e0-4187-ac9a-e0113fa8d450">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f5b5017f-8334-4275-a685-118a0a3d422d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b8fca173-89bf-42b4-8397-7a25ce3f66e9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15a346c2-d3fb-40da-9c01-8692479d0aeb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c0bdf34-c986-4a96-9817-0f4a62d7b412">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9e3cc5e4-641e-449c-b54d-6ccc8bc445b5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3bfacb94-bd0d-4cbf-abcc-51a0ccbaea93">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eb37681e-298d-4b33-b194-db47211c073c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c320800-12a5-430a-ab44-8513570a8f7a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6cbd70da-93b4-4bca-a60a-ba0b4d460c1d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de0c2e0f-9869-4614-a6d8-cec8721c1f6c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0e10896f-e33f-402b-a17c-0ff5bb8862e7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>smtp.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5eb27cd8-78c7-45bf-a5b8-4f150687302b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>snoopy.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-160d6b09-3454-4117-8eec-12b5be56afc4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>snoot.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5761d6ce-5fb8-4ec3-bbf4-bda0686c6bcc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sns.syscation.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4df82813-d992-4f89-8719-1a5ed0a52a7e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sns.syscation.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7676890f-2de9-4eb5-b979-8280f96d8fe8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b12e0e0-67f3-4615-a443-11b0efe793fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aebe4545-2513-43dd-b56e-2c6d2ad1d872">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.cnnnewsdaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e4acf7d9-039f-4d07-a6aa-fb4fa6e630fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9dce55b1-1c71-4ddc-88b1-a9ba5744b62d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-738fc074-5dc0-43ad-85b9-0f509b9c09b8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soft.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6ebbfc7d-f4dc-4ea6-8059-f19cb99bc053">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>software.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6998904-4696-47cb-83b0-bad85b2731c5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>software.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5a024932-6440-4e19-a322-7a0172d86095">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>solar.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-93933af2-4eb7-43aa-8fe3-1ac7941439fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>solar.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-980dd525-e267-49bd-be3c-4b724e87af78">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>solar.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22e2aba5-4fd8-4cdb-b039-332c499116df">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>soler.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22567276-a0fd-40ce-86bc-f2463d91e7d9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sona.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d2bb5208-459e-430f-bda9-684e6df2ce0f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sonah.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-852be819-8e63-459a-8f90-357bb3fd501e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>songhong.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6503ee29-4a1b-484f-a98e-1671c9133cb1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sope.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50240b98-9a99-489a-baf0-9f7373fad03b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sos.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5dec4434-3fc3-4018-979e-4da1f9dbd78a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sotp.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-96e2b77a-8426-48f9-bb24-4503d998c356">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>source.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9ff5ed7a-ccb4-44ea-aa6e-b7bd3f75b308">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sp.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d86292c-5242-48bc-bf88-027996ac583e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sp.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-917c01b2-4420-4c05-8ee8-ee273006b946">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>space.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-948b9120-e8e8-421a-8640-910458130fbd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>spah.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-841921ec-cb65-4da3-ab15-cac86589a645">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>spahi.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-efd054ba-f4de-450e-a8a8-7dfa73b43e13">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>spckl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a336416f-45f7-4559-b5cc-0af57975a1e2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>spcmon.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6656efe3-3b4f-4623-9f95-74540f3d33d8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>special.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f9887088-d513-4f2a-8881-aeea9c4203f1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f409e96f-0ea0-4625-84b0-c00cbf1b256c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-48916909-3fbf-4cfb-b536-e2e88174e41d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04e37d30-d28e-4d78-be1d-d44b9a849a73">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-71ef294d-5132-46a5-bed1-b6f8c0fa9976">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c52d5a4-63a3-4fa7-a953-ae5cfa413a9d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2dd428a-5924-4041-93a5-f78dc7f52ddd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-657d1255-a585-4544-97d7-bf565925d945">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9df7a8ec-d69d-4362-b763-d8afba097bd8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-312ae27e-69f4-453b-86f4-c9ee5c8b5304">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4b7094a9-12c0-4fe9-b2d6-c06534c919bf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c423a5c2-9d9e-4541-ae35-2e1263b032b7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-761e2b1c-cd7b-4f2d-b26d-a25db0e84c53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b2f2ce3f-212a-476a-b0b3-a44bd53b10d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5312ce6-94f5-400f-9226-f438199015a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d1cffee7-60be-4671-a2c8-0d31bc5dc131">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sports3.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f4e4b1ae-7a09-45ce-af99-a928d6c81f41">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sprts.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ade1800b-e234-450d-970f-53a733f21a38">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>spte.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-794168b3-3dbb-4e7c-9b41-f16f08dae747">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>squick.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5713645-cb7d-4f76-b7d2-37ee104661f1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sremx.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-556637d6-cdd5-4d68-8147-cb15e754a686">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>srs.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4181f58-d559-44ba-8c64-5f13bbc0d91a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>srs.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d7f072aa-2fee-47d5-92ec-ac0ea6374654">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>srs.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a6d8e00-d5e6-4323-b924-dde6083d5040">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>srvmail.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9a0ea530-7c0c-49b1-8d8b-ab155b7f11b5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sslsrv1.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1400fa7a-ff87-4689-95cb-845ed9647da5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sslsrv2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2222a792-aafd-4782-8db1-9400b18ff636">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sslsrv5.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c5a2dae-c0a3-472b-863c-55192f0b8736">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sslsrv5.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cc708f56-3653-44d1-9e3b-f8def0e1b426">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sslsrv6.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9288b3a9-d865-4808-9729-563d29fcaf6f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ssun.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-21df0fb5-b2b6-4052-b109-f55269df1e99">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>star.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-acf8ffb2-21b5-418e-a347-0c2d4f48e0c4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>star.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9110a0d3-41dc-4558-91c0-4fd786848594">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>star.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70f16e11-a42b-4ee0-acb9-54aafc786cb3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stars.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e85d19c-ef89-4420-955d-86db17e99d85">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stars.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e5a948f7-6130-46b6-a6a0-f313d6baaab9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>static.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bb3e9bd8-4c96-4b51-8302-c748232d85a6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stell.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cbe5834c-4d94-46b1-9b23-ea880dd4e4ee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>step.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4f1dbb35-f9a4-40a6-9426-b6f34a554a5e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stk.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca725c56-5208-4a16-ae3e-9b698c5653e1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stk.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8160a96c-aaf7-414e-9229-7538a2361b99">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stock.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d8ce78e4-ca3e-4079-9ec2-52af7f1a0c82">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stock.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b8b62c1c-50e8-4d8d-8398-137a9c18aec2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stone.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d7165372-8363-4bb5-a836-ddfcb8f0f660">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stone.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ae2eb2d-ef5d-4f33-b362-97251c9d7242">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stulaw.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8a726dbc-e9dd-488b-b20b-679ec1c5f118">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stuwal.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e633387-2fb2-4486-a3f2-b4e60ecaff26">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>stuwal.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-99abd868-3d26-4fcb-b218-30273cb09bfc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>submarine.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c4e37ee5-5ba9-421c-9ab4-c423e69b13b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>submarine.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f1159514-1ad3-4f58-9b97-003be32bad32">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>suffering.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8084ad50-01c6-4247-9a1e-93b9bea21ed1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>suffering.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dc575502-2296-4aa6-89b1-51a6df46bbc9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>suffering.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a10d1066-ddcc-4d4f-b9e9-93e54dc4710c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>suffering.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-11f58701-0497-447c-9a53-1d81a4f9a007">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>suffering.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c00201a-5d5c-41e8-9646-fb57079c33e4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sun.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ce1ab8fe-206a-4f3a-b1b1-b5174d9f273c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sun.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-374bc2f6-ab53-4142-8b6f-13ca447bd799">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sun.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f9fb9b85-a5b5-4e32-89f7-7a7468902e7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-394ad76c-0128-4647-867d-5b000b03114d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5056c839-4de2-4eb9-b591-2b5a82ddf3ed">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f2332200-c978-453d-b097-4aaf69cf4c12">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-15f0bdfa-fa07-4a20-8f8f-1ffbc6d896f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-065bbf79-a8fc-473f-902b-b010b6a2992d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7b89d515-e2b3-4855-a7c1-e676682a8d9b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-369798e0-b7f6-4fe7-b950-d55e5740669a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52b3e81f-fae5-4ff2-98b7-77a07a2c8337">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ef639f9-7d35-4377-b431-64031b3324e3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8047b18b-5f15-4cf0-a9ae-6c28f5568190">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f67b122f-29e2-49af-adc3-2219b3c3f9ad">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ad01e0a-1865-4c7d-9d85-2ad17738422f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>support.webservicesupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e91e6e72-5b09-44dc-8252-475d043f9c71">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sute.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a744e43c-3689-4466-8da5-60906ec0a395">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sw.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c9721488-e44b-4a54-adad-3ca913991207">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>swiss.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8b826ed5-cedc-45e8-ae65-fbb77d89cf1f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sword.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-06963b71-aa89-4a90-b2fe-498c850571b5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sword.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cb41c10b-d858-4b44-8dab-3d2686698aba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>syn.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f4f0465-52b7-490b-849a-cd066cef22c4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sync.ns06.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-925faa18-14c7-4af5-a623-ee1a6a115dd6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sys.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-75b11975-4568-4ebf-8117-b06f561c47d5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sys.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0a83b3f6-9c71-47e5-946e-d05d139ea984">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sys.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a0a3262c-07f4-4b19-acaf-cc4b93cbea9c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sysj.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5519b492-6d6e-425b-91da-503163993e01">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>system.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5e3d780a-9bfd-4538-aa25-d88f5b8a6adf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>sysy.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a903ffdf-4002-44d2-93d1-8bc9880c364c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tag.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bdd3e184-4fcd-45f7-8cbb-c4baa661b621">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tape.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5099637-1a97-4592-b226-47f3c03576fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tape.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5b9b6fc2-f1b5-494a-9627-ede70d6b1c28">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tape.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dc0c0691-433f-4593-8243-967e5ca73559">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tclient.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a4ff7829-0fcf-4049-95c7-49884da95874">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tclient.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-913349b6-d823-4a6d-80c1-66b07373e3f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>teach.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-77b2168f-ae5a-4b89-89bd-3ef081e2800e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tech.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-905b71ae-bcf0-4584-95dc-5511cbee0a74">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tech.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1a5ae72-1baa-4a25-9969-3b666552a1f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tech.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7f9ef48b-6a7d-4005-bb9d-6e495ec081ce">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tech.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fcf969e0-6c42-4b74-b7e9-20ba112b9641">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tele.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d87d64d-cfa9-4832-92bd-c21e332e5450">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>telnet.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-68a1a492-c5a5-409b-bda6-e0605b48d4d1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f4eb3f1-1b5d-4099-b4d7-ff3c293af837">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52250b35-8e5d-4a9c-bb6c-be54ff94b9af">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e27ed2bd-6371-4b59-967e-99083ce228d9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-266aabc4-6129-49af-9b6d-ffd310ad4ac0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0377305d-19fd-4453-9a84-4ac16dff6172">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>test.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1779bd9f-c51d-4885-b27c-9ae3cba83422">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>thanhnien.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dfba30eb-7c2c-4636-882d-b6a4e611b80c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>thec.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-329be77a-c660-424a-92bd-e58abcdf1825">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>think.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f102ca8d-e974-4569-af93-350c5222b55d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>think.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42869b3a-8f24-4684-8e91-61ca2c674ffc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tia.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-edc1bfa7-d1fb-49da-96b2-6b2afa0957d9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>time.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-281bebb4-97fc-4e77-8ec9-218fb1c6d778">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>time.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7f09a710-737b-4418-ab72-9ed2fb7c9c9f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>time.mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-44dd2257-4345-48db-b371-16cc8c73c3a4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>time.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9805ef6-8e8d-4f60-8e1f-32d08d23f738">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>time1.mediaxsds.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af589db2-5e4e-4885-93db-9ed6b690253f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>times.nytimesnews.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-64e14f4e-5a62-4ac2-8816-9d508de514f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tk.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a76f8e45-af85-464c-8b72-26f90faa2bbe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tnjs.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-493bd78a-4a9b-4d56-8a3a-8a4c21cf6b7c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tod.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f3a36594-4119-4682-afb6-ec1fbd65fa53">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>top.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c6fdca25-fcb3-4fa2-95d5-a2717f0a4541">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>topmoney.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d57943a-4e4e-46a1-a84a-205cbedfb499">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>train.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50b6500a-baf3-4b7a-bff7-443ad62d88a0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>train.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bb88e289-67a3-4289-9a21-8cb1f4590a2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>travel.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-701bc621-2ee7-4050-a5aa-36775a7eb9f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>travel.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a774e643-89b9-4004-b44f-669584476be9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>travel.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-624cafc4-3ae9-43cd-8bb4-d11f76063229">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>travel.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0b34af75-d37c-43fa-b701-c6bbcbfbf74b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>trb.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1449cd3a-a9ab-4069-8bad-b90548866ec8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>trip.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d6a92702-b83c-4e13-8dc3-d4838f0c3de3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>trip.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9d25b85f-bbba-4c56-8313-c47dfefc9fea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>triu.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-076e7d93-9a01-4be4-86ef-465a7c786921">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ts.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dbefddf3-9dbb-4d6f-80ae-fb767ca5ffdb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tt.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-687ba409-85b0-4506-b2a1-b079937f24ef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ttl.tfxdccssl.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42a74b24-096d-4630-aa18-f73c8ac80cf4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>tx.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1eb380b4-316f-49bb-b293-c864e71e2789">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-aa.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ab00ace0-cc38-4113-98fe-3bc4a80673cc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-aaon.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ffd9cbe1-0d84-4d95-8e76-f1ac6668b4d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-aeai.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-13a9ba93-6c24-478a-bba4-0045d4dd3cf6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-ag.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-86b6338d-30c0-417a-8a8a-9bbb6402fd08">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-asg.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c9904f1a-3b32-42b0-8996-f9730418b01b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-ati.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d8302c8f-8fce-4f88-b6f0-a92398f950f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-bdai.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8cecde79-edbb-4a2d-aea7-8807aa3d6265">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-bdai.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30dde9ff-112e-41a3-904a-6e5b380c0255">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-bdfa.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e42a65b4-d27b-4367-a29e-03710504c888">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-bpd.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a2dd75e-e57d-4a8a-a54a-5c715608b0c1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-cccc.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d04d21cf-0386-4216-8158-86bb65fd7754">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-ccr.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-52cc59c9-49d3-490b-8224-7ac3c2e9b788">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-chsaw.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-beb33a0d-768e-493b-bc14-6b329e704613">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-co.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6fe5700f-8dd1-454a-b55d-503e9024c5ab">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-cti.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b8a6389c-a9ac-46ab-a546-dd612c965c76">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-dfait.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-235dd3a6-a1b1-4562-90d6-87fffbea45fc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-enrc.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c72ef465-6da4-4c90-b616-f93d9d9cbe02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-ga.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aa53e974-844e-48a6-a0b9-7139bf9cb56f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-hst.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a212f175-1a8a-4919-92f1-891e0c04e2aa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-hst.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f2d50239-db06-461a-a69e-833e94ec07da">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-irpf.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ceb7435b-fa0c-4533-a669-891e4b08723d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-kfc.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-502abecc-9fa0-46da-89d3-3947e03e227a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-man.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9609185-933c-4c78-ad2a-d07282908874">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-mbi.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-13f5709f-ec4c-4217-90b5-0a479aa57514">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-nema.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9eedd28c-bc3e-44ce-ae83-3bda8a11378e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-opm.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d36b371d-5ee8-4ff7-b82e-b4be30558234">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-piec.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7a9dcc72-f03a-4f5d-aa63-9e76dc6843fd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-pmet.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-368aa71a-0f35-4fc2-9305-b75fcc1ea913">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-pnl.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dfbc9f00-664c-43d8-95d7-64e3a8675867">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-rev.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-53560447-1635-4c93-b7f7-4dc3d1075a32">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-rj.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-81269b3a-e801-4667-b89b-627339903e2d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-rj.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-51849355-56f0-4d6f-8c34-74983014c93e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-sbig.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-932b868c-3d17-48d9-b740-f8bde47ca6a1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-tree.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5618e0fa-9b70-4846-8a7a-4ff1b18bc64e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-tta.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-12486603-b3dc-4b01-97b1-24d3bb7da82f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-volpe.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-629d82b3-fb29-4270-b2fd-e7ad22bba321">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ug-west.hugesoft.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-59ace8b3-3f3b-4fac-af3c-329142608250">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>unifh.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ba2b62c4-5da6-4416-8daf-aeb40bc1e3d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>up.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe283acd-afa2-439b-bec1-c438a6c1c299">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>up.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dbb42332-11ac-41c3-844f-3a43eddc6774">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>upback.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b8475aa1-376f-47f8-b1cc-5a595413e35c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-10156910-cfe1-43dc-8f5a-dd44fe764c17">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-95fc1927-ef05-4eb1-8459-bde45060d326">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-405fdb1f-67b5-4fd1-bceb-c0bc004e7e87">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de4115db-0765-4388-a0f9-1543af6a0ffd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-047146c5-98f8-497b-8013-52b3eb94cde3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0092f52f-0d11-48f3-a8aa-b31ee560d78a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-733aaaa2-2f90-4449-89b9-8d36530722b8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.dnsweb.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-540efe6a-00c1-48b6-8f71-60cbdb368e17">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de18b92d-99ab-49b6-8285-94a56c5d8165">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f481878-9797-4293-9328-5d7ed5c1b352">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7325d0f6-0799-42a6-aa8c-80ded2a95fb6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.idirectech.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af33d494-44ad-400a-996f-2afc478b4850">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-de135777-5946-4eaa-9bea-45da4bae4cdf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a48c0dc3-3bed-4cb0-a46f-693a62c9c833">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-868c5fad-0f7d-4d22-a421-3830cf189623">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aa5e14bc-2f1d-4604-86d8-ca5aa6ffbbdd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d71e978e-4034-450e-9b59-0486d4a3d4b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.progammerli.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9fe6777e-3faf-4538-80a4-5ecf27bf7ad6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-92387e80-28e5-411f-8291-33784d89cf34">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.safalife.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d7aa2302-108d-4b34-b57c-87d8bd920a81">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-66cc5a92-7700-43e6-ab5f-1d483add53fe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-25d0a56c-7bb5-49f4-a920-609442cc7af5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c19ca843-887c-44f6-b999-4dca6f1e7765">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eccb3da7-1758-4219-b9c3-0d034c194495">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.tfxdccssl.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-43e546d3-5340-4948-b4d3-c172dceceefa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-489db97e-6bc3-4074-9724-44fc3eced94c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-881fb93c-efa2-408d-9eff-c259b235024d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8352d48f-9ef6-4cc4-bdec-b14ab1a4694c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aecc28aa-d712-4bd8-b666-df5162cae353">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update7.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0d1db120-c2e0-4407-b4da-147e7a298940">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>update8.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f4849f2-e9e0-4e8f-87a5-9cc4623186c7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>updater.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4feba123-e918-4414-b2b8-7235e9a4e237">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>updatevn.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1964a886-55dd-4de0-953c-a3e0e4f5bc15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>upload.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4eaaa7c5-59bc-43b9-b5c2-cc29fc4432a2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>u-rfc.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9d2c5ce8-2fb7-4ac3-baf7-d09e5878d94b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>url.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8a4dcb07-576a-43c9-a797-632f462268c6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>url.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72695c7c-70ec-476d-b1ef-7050d3232bee">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>us.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b6aab488-05ca-48db-868a-c4967e1ce0bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>us.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0df93472-99be-4720-97f9-a581a313aca3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>us.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50911d23-05e6-4eed-b761-25519e06860b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>utex.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-72632f58-680b-4e1c-803b-cdc98a221177">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>value.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dab92488-8c60-4ba4-b545-e988443d8811">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vedio.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-14a03e49-f30d-428d-abe5-338a1a68f5e0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>velp.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fed37c80-58de-4401-8036-033d7425f59a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>via.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cc574457-5bef-4cf3-bd94-f71e36a006c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>via.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-02f633c7-21f1-4e1c-a032-a8f1197fd51d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>via.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-604c91f5-d947-4cff-9aa4-7780555236b6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>video.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-30b935eb-c3c7-457d-9ac9-73c50823ad84">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vip.issnbgkit.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7cf0cd16-e7d3-42c6-9fdf-8801aff5a968">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vip.pcclubddk.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-410fedbc-cc52-4321-ab0c-3efe6141250b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vip.sportreadok.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-33e5534a-daae-42e4-bfc6-ac7fb006936c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vis.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d49ae333-03f1-4983-9c0e-bd503197f4b4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>visual.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-40a528fa-c835-4c59-b3c3-40564a275d9b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vockl.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1b256330-b438-4e7d-b8c7-cf1d74e8d23b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vol.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8a31774b-1830-4792-9c8c-be4e2275da6c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vop.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2f561bf1-fd3e-49a2-b21d-24bad4eeee48">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vope.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-285e7084-c0b7-4703-b98d-f28b84ab376e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vopm.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a392f6d6-61af-45b2-9bb5-62262a58deaf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vpn.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f8450ebd-a5d6-493e-8bc1-3cf296d2e3c0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vpn.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a5d07ebc-64f4-479c-bd77-737da92099ae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vpn.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-820262a1-2650-4518-8bb5-471e20130905">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vpn.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-93a6045c-03b2-4b48-9dac-b849ad467258">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vsec.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0704e22d-2a53-411e-a03d-0d792b73c086">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>vseh.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-620073b5-ebd1-4937-94b2-73c1c863213f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>walk.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d43e24f-b2cf-454d-bb14-65d810d67a59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>walste.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42cac513-cd7e-41ca-98e4-763e8052939b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wangye.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1ad3170-e269-4c98-9c6b-d31d701f75a1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wangye.reutersnewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d23e173d-bb90-4af6-8d2d-d09746a90682">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wapi.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-404a5682-255f-4ee2-a9fc-39297b296b67">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>was.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8c424948-fc1e-4837-b433-78ed82237081">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>water.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1f54337e-32a3-47b6-9cd1-1f097372756f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wave.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-106efdbc-329a-4cbe-97b6-76c31d5eda2f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wcasekl.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d436778d-7e85-46c5-9737-a3c16fc7f062">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wcov.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e630a8d2-b131-4ec4-a0e0-d413adb21131">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wdeh.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1eb4eff0-05be-4649-ac77-b2271e35360b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-eec5b499-aa37-4a5d-b2a6-ffac2e872961">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.chileexe77.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f0e62a96-f599-47df-b915-c7a5c49f42b0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0845b2f8-f2bc-4df6-ab30-296a55ceab86">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b2fa7ec2-5038-4bf8-b950-b9628e98dcbe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f83b18c7-5dd0-4b3f-a91f-2deb98743da9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weather.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-bd9dcf8c-cc52-4298-890c-0c58e779a3fc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04d66081-dd0b-47e8-8661-671a70bb4596">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f974c594-5e36-4854-81c5-32bbdd157af3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-dbd25b0c-cc24-48ba-91ae-965b7ecb365b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85cbca16-c9a9-4883-a203-401f8be74695">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74235860-ca89-42fa-874f-fefe1f47caac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e722e60f-005b-4508-8f1d-1f2c634efbb9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-12bb2d2c-7cfc-4ebe-b56d-129bc53add47">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0f339509-18e3-4ff6-a27b-51cce5ac65ac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-94cf1d5b-7ebe-4e13-bafd-295cfa191d2f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7443243c-b0fc-4087-b4e1-81d050d09fcf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.thehealthmood.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9ab658cb-783b-4529-97e2-e70358868203">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>web.webservicesupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2ac35e45-151d-4faf-9c48-3d526468ac27">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webdata.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fd4e6127-4fbd-412e-b253-f7511e4234e9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webjbs.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d9c971fd-0923-414a-9d02-6d18e441323a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weblog.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-69eef9c9-d2b0-4176-bba3-608430727bc1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weblog.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-60e7a4f3-7ec9-4937-9123-c4dcf50ba7d6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1125fc09-0c70-4161-80fd-550d9096e145">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8d129aa1-6889-4ee9-bb7a-24f9f4315303">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-db6deb55-97c3-4697-aeb0-1a08ee8e39d7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ab0187ca-a5fa-4726-9cf6-a70535eb163c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0176ba8f-1333-498d-b924-acafa3a1f5d4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c629315e-069a-4d0e-8b73-7f4af0045cd7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d06ea6db-23ed-4780-905b-319082e3d990">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-38eea3e7-7481-4d20-a6a2-e4a4c48f28a9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c3b486eb-1c65-43c5-972f-ac0f666713b1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b3cd0b00-36ea-4cb8-8578-2d6beb259a32">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-92b91ea4-21a2-4c51-b023-6e91da61446f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3fa15802-922d-4661-85f8-6dc96f789f9f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-635cc469-fcb7-4c0a-883d-467bd477ba8a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e18a81b-294a-400a-8994-3205f149d4ba">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b786f395-20e0-4598-84f6-714a734c5aa3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-65a8424d-7184-4260-859e-cdcaf9b9a4c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4abf7ba4-4988-4976-a6f9-c41ea0f36beb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.usnewssite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-06cf75f4-36ff-42b5-9fdf-db858159ba3f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.ustvb.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b6a107f-093b-4018-8f66-97ea57a4190b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2d1dbbb7-3fb4-4202-bbda-2bb6b0e5c844">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmail.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-97b96580-b340-4f9a-b201-95217a14c21e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmailh.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-147e30d2-5b3c-43cc-9469-3ab78206b771">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmails.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5df4edae-60b2-47ae-9043-c22d601c3518">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webmailw.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-20c6a0c0-74d1-4e7b-9a08-38cdb4db5aaf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>webs.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1882dd82-8761-4274-8eb4-252fdd97c4c0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wed5.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ad1b4991-1585-4405-8c1c-8ea5f4cf0823">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wed5.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1b0cd923-3362-454e-b0f2-d68ff3033a59">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>week.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2fc3b5de-dd77-4039-9dcb-b022519d617e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>week.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-00b34df0-3df0-41e9-a787-6bded07156b8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>weg.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-aa93828e-5c35-4e90-8acc-f44d1ab4560e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wehmail.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a3f3bf40-28ca-4ba0-a263-b1cea4fac44d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>west.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c23e14f-0d12-445d-b80c-0168bdc55dbc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>west.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8e861610-5558-4279-bea6-77319b6d2bfe">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>west1.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e77cf325-5e02-43be-90b6-a55d29871ab9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westjoe.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1745e381-abe2-4ad0-aabd-281329585feb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westking.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0b4843c5-2a2e-426d-8a88-6ea983002a74">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westking.comrepair.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4c4dc1fd-75a3-4951-82f1-451d291aa65f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westkl.blackberrycluter.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa851e21-1930-441d-9d5b-9e8f2df43137">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westkl.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d4475a6e-af93-4103-824b-f0553b44e422">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>westnew.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5957e83-a617-4057-b6c3-daeb0bd6cf76">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wfcx.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d932efb5-bfd2-4687-aa98-2e0fb7d3d95e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wff.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-665d1a18-b040-41c9-a48e-3c0dcdd504cb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wgl.infobusinessus.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0d047ea0-78f4-4b94-b888-6bade5f98278">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wgw.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ddc2631e-394d-4a31-8790-88983c105173">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wh1.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b37aab06-9ccb-4c0e-b55d-0e9354dcc4d5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>what.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-46aecb27-750f-401b-b695-2d2e156384a1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>whi.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31005c60-f1fb-4457-b417-43338900e34a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>windows.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3c27c013-f14f-47e9-b8fb-f845868b1224">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wins.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-63f894df-885d-4156-8dd9-5dbbd17afb3a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wish.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-29e0442b-9059-4e19-bb08-047f3dc44177">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wk.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d5f105f6-5292-4bac-96cc-4a8dafe96a8a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wmp.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e84ef045-8c49-49d0-a3c3-b1cbd12bf02f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wnam.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-553ac933-85fc-46e4-996f-30b8719e0cf8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wnara.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-91331392-1644-48ad-a356-0383e902f4cb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wned.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5fc89943-40e5-45d0-89d8-72abcd6b04e9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wnew.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7d601ed2-e48b-4d44-9d62-2c1bf7267992">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>woil.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-576e52da-da5c-49e1-a6b6-2b16af8d55bb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>women.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f6a7778f-aadb-45ea-86a6-6936b57334ca">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wopec.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-790aa420-31b9-4cf6-95de-fe041ae2a22f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wopm.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-06e0fe47-4fe4-4060-a17e-12a53751c8ca">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9e9a661e-5f91-4791-b7c7-e1badb16b86c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-81b3c630-384f-40f4-b606-c96714fae120">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2c14c9cc-5ff2-47ed-90ce-33bd0ca1bae7">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0eef5819-687c-4552-bc44-9f0dd0df9abd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a5b30dcd-7553-44d4-a45a-3fc45d3c6119">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>work.yahoodaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-45dfe1c2-84dc-49a1-8763-84631d77dedc">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>workstation.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f00edfd4-493d-4522-b662-fc68e3c0926d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>world.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-af38eb21-fc86-42df-a876-fc2aa887ef40">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>world.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04427e95-af33-45e4-810f-6b32415a954a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wow.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-603d2049-6a10-4151-9293-007b9a35160e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wow.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ee20127a-e6c3-4253-9065-a0993d4032f6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wpcs.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f2a0aff8-32e0-4452-82f5-577d5317a560">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wpot.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3aed3f34-eba6-4e6e-b389-6ee48708cd02">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wpot.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6f6eb0da-a150-4255-9427-887d76a9e28a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wptex.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0cb635f9-d530-4dc9-985a-eb1138bd6552">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wpvn.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ad0fb547-56ae-4842-ad36-f6cd7d107681">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wpvn.softsolutionbox.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f9d1fc66-c92d-4710-b897-84fa3464e110">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wrim.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6a76675f-4ede-488b-84ac-6e71435dcc3e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wsyggfw.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6081f546-b28b-40bb-9975-6470be19ca6d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wtom.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a960a3a2-0ee8-4da7-a3cf-58ce7b6d554b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwab.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b5fe064a-f2a1-4ca5-bcf7-37f76085dcef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwebmails.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-28186d0d-04ff-452c-a56e-6f7aac3afa42">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwt.blackcake.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5e3f5a3f-ec33-4c2c-a5a3-8ef568f187ef">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.advanbusiness.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-865cfc89-01a6-4df1-9078-64d0f1cb4cac">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3ce66228-ba07-42c5-99c2-d7a5869b9121">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.aolon1ine.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ec0726e-1c4a-495f-a5b6-1b08008cd4c6">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.applesoftupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7c67feb3-3931-4a63-82c5-c5076ff3895f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ee38c056-fdb0-4b0e-aaa7-32e4638aa35a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.attnpower.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-19cc549a-8592-4375-b39e-520f48ef884f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.aunewsonline.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9097c1bf-9e16-49b3-87ac-a4be4d651d38">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.avvmail.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e4447d9-d22d-4034-8475-bae02a3f7a2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.bigish.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-04769c71-648e-415e-8e19-50fcce3cd53d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.bluecoate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d0025d60-6cf3-4ea7-a8d7-33866e6cff15">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.bpyoyo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-28858808-ad9b-47b0-8de5-010ca8789c88">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f99604f6-b46d-41af-bf7e-4f5b857b4e74">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.busketball.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a14e5b24-4460-4892-ab9b-82d583d29d2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.canadatvsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-cfd7de70-33a9-4c6c-ae5a-8c671a2b3014">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-58092518-2ea6-48d1-8805-bb609875f431">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.cnndaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e876aaf9-a41f-4361-97e4-0d94dd529021">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.cnndaily.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9f404de5-74af-4bf2-aa92-6f473f4ecff9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.cometoway.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c39afcaa-2a66-43a1-af87-617ccc538a58">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca70f6ad-1db8-481a-9b80-decd086cc6f5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.competrip.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3961ba2f-4999-454e-8214-e9c7928f86af">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.comtoway.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6af30185-83a5-4bc7-adc1-37c15ecc2484">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.conferencesinfo.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-101bc1d1-18b0-465c-8b91-3e0ec06550ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.copporationnews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e3562789-8685-46fc-a000-c764943cece0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.defenceonline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d300fde3-f6e1-440e-9754-5f19e823c3b2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.doemarkennel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-9eb07fac-dc7c-44a1-a589-cdc1575c2b75">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.downloadsite.me</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8254b556-f429-4f03-9398-ef2aae6f806a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.e-cardsshop.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a82ba7b8-9753-4a57-8ad9-46c835598358">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31681d84-3495-458b-887d-1edf97997266">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.freshreaders.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-46087ef9-f565-4f4c-8083-64d24aa6c696">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.giftnews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a1da7d91-89ce-4df2-a792-9c6160f4a534">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.globalowa.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7ce816cd-f259-4b71-8aa0-c3dbaea31d3b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.gmailboxes.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ac2ab72a-ae52-4672-a1a4-24d717880068">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.hkcastte.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a10a0c17-680d-40dd-8068-0548e53ee168">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.hvmetal.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7da9acf3-88a5-4155-953c-e9bd518ec879">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.idirectech.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-061f14eb-f32b-4f1f-86fa-2c7f85be7eae">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.ifexcel.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-498ce8f1-b59c-42d0-9262-32efde17fa8f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.jjpopp.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-131345c8-7c2a-4bc6-8ccd-e50b330b44c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.jobsadvanced.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-37e146a1-11a7-466b-a7a9-cf4b5ad327ff">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.livemymsn.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-577062f4-ddf7-4320-a6f9-1cf7d5282220">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.maltempata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-657cc657-5f35-4652-8b1a-99dbb477b228">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d7340cfa-fc47-49b6-9d85-7e8cc64046d2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.microsoft-update-info.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3475d033-3a92-4da4-a663-a8e083151147">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.micyuisyahooapis.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-345e8eb0-a358-4012-9a97-7162f9170786">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-65faa2a6-5c0c-4df5-8d2b-773b8a403815">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.myyahoonews.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2b0ac855-0348-4c3a-822f-d00f06307cdf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.nationtour.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe225705-8cda-4106-8e23-1931984618a5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.newsesport.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-91f695b7-25bf-478b-b282-34625dfc7c05">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.newsonlinesite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7be30991-b2e1-469e-8e74-9986a6ac639c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3fa88303-fb35-4b47-ab79-e42c3a7b56a8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.nirvanaol.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-14d88313-1e63-474e-aec2-3422ca2ebd0a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.olmusic100.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0fb39cf3-8438-49ea-8c8a-a7e66e62141d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.online.mcafeepaying.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e2670ed0-1bfa-401f-a8c2-a4ce84428e44">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.phoenixtvus.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-610a2b2f-9ebd-4b72-b75c-6f91e7f95876">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.pop-musicsite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a53a00ea-ea1b-4a12-841c-f448abec9c05">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.rssadvanced.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-616d8f9f-754a-4b1b-b8af-6df18832c3c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.safety-update.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c1e1c228-87f2-4693-a9ec-9497f046dc8b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.satellitebbs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d76944d5-3d86-49d8-a5b1-e4575e09ece4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b1553427-7c4f-4db1-b3b3-7c35f1f91c82">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.shepmas.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c3bf7b84-2ca4-423a-bbbc-a95861494013">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.skyswim.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-94c9456c-50ac-4a19-831f-eb8e2ac1ef5b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.staycools.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-37e9214c-b054-4e52-a929-955a6f5f0fbd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.symanteconline.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-50743749-39a4-4c13-8162-2ebda65dd77c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.syscation.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1d12230b-25d5-42ee-9265-35b4e554538f">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.syscation.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c5b61e42-4e17-492a-9cc1-7afed3f7d979">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.tibethome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-106eca32-ea79-4749-a5f5-298760e84b6a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fe9f3f16-0b04-47d4-9861-6fcf7d22a0ea">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.ueopen.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-271fab0c-536c-40cc-bf56-1126ba975549">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.usabbs.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8a6aacea-ee3d-4523-aae4-0a684e20f3f8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.usapappers.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-42be59e4-fa34-4ef1-a309-4f0f4ceedf5d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.ushongkong.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-80ee18ef-2f16-455b-9889-0ed3475f81fb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.ustvb.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6b7d47d5-775c-43b1-ae88-a817e74ae0f2">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.uszzcs.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5ee1d2ba-bb33-4879-be50-f1efc1feb1c0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.voiceofman.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-22eee4b8-09d1-43df-8e69-fba7a842286b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.webservicesupdate.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca5468ef-4f7e-4064-a0fa-5ba9ee780a6c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.widewebsense.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d892926d-e9b0-4148-a833-d4ace7595cbb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.worthhummer.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-1ba7ff4b-79e5-430b-a011-71384221dcdf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www.youipcam.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6651f44d-6a53-48e5-a87f-899da2e8ea7b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www-01.marsbrother.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-4a671efc-5287-4fef-8fa4-f37f9bff627a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www-049.businessformars.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a25cc22c-dee1-4ec8-aca4-e54b62321b9c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www1.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-70fcc2f9-e376-4f69-84c4-1a2673625f6e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www1.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-31bd2163-6b40-45a7-a235-8a3402bac02b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www1.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-ca24faf8-e5ef-4ea0-800c-29777859a3bf">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www1.saltlakenews.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-21faa7f5-1662-44d6-b34a-12f0a370ee71">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www2.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e9340fdf-c878-45ad-aadb-86b8eb11c3f4">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www3.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8326b906-797d-43b7-a56d-7d5db1fb10c9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwwcb.newspappers.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-979bf8a0-9e09-4b6c-bd57-bb11bf08b463">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>www-ctr.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-03c31541-ea47-4ff6-b786-0f12c0271d0a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwwi.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-e8a4292f-771f-45fe-8d3c-0bc84eb8ab1a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>wwwt.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7ce4d808-acbe-4049-98ae-6f49dd9a3cc0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>x-admin.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-438bc5a2-8ddc-4d07-bb72-8ae180232401">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xawh.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-195ae5d5-965e-4b82-95e3-e8fad12f8a7a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>x-book.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d927394a-c5bd-4505-8c27-64dcce7656e1">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>x-fmgg.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-893a812d-80fe-4459-97b8-8ca086702bdb">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xinge3344.cccpan.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6e929deb-7296-419d-8354-722e926a0a4d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xinge3344.ys168.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c77c9002-60bd-4d2c-bb47-ee27f2ccb8fa">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xmer.businessconsults.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6717c27e-39b0-44da-b51b-af6a69e10dc8">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>x-stone.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-7e509a4d-f32f-4372-a2e4-b218658bb42e">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xtap.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-638e2cc4-457f-440e-8744-6375d215f14d">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xwclient.arrowservice.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-74fd0949-3222-40f8-8210-74139c9d257a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xwclient.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e3ccbbf-e39b-4460-9b5c-8e56e0f91d51">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>xwclient.newsonet.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-2db94eb1-32f0-48b5-90ad-cfdeac5e9f6b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yang.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-85663de4-b491-4764-a051-6f72247546b9">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yang.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-6435d0db-15a4-4cfc-83b2-81d453207527">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yang1.bigdepression.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-fa21fe8b-3b84-4df2-b0ea-60b62b358e31">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yang1.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-d8edcaf9-c447-42c6-838c-e2f5205cfd25">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yang2.infosupports.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-a3ad1a16-905d-4886-be7f-bcb04c13aa44">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>yard.earthsolution.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0c1a9425-1d61-403f-acdb-e962eb2db559">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ysb.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-c73279fb-40d6-421c-a4d7-184a7a6dab97">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ysb.purpledaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0408c05a-6b83-4e1f-91ac-ef62f07c6191">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>z0.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-3e2fdd26-d948-4781-83d9-9f8b1661aedd">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>z4.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-26ef4a5c-84ab-41b8-b692-d8d8cdd2c49a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>za.booksonlineclub.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-f33df2a7-fcc8-4bcb-8f4d-977f2aad5602">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zapts.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0de1428a-b33d-4852-ab09-bbff77ddc9c3">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zc.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-8f8be44c-b198-4de6-bb97-1e7a76febe87">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zero.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-55525e51-8156-4bae-9592-488478ebe12c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zh.lksoftvc.net</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-b25ea6de-7a05-4219-a523-4d98c6f84716">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.aoldaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-58b7c75a-2cff-49ff-83f2-a30372df8d2b">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.canoedaily.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-05dad320-9f24-4269-9f3e-1dcb616ce3c0">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.companyinfosite.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-0733ea16-5d13-4f66-a62d-2e36cdd23ea5">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.msnhome.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c3123f2-be2f-4c43-81c9-cc050015c948">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.searchforca.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-5c7951e4-73aa-4107-9fa3-f20f3feb539c">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>zone.todayusa.org</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
        <cybox:Observable id="mandiant:observable-314006a2-512a-47a3-b694-1fde9341786a">
                <cybox:Object>
                    <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">
                        <DomainNameObj:Value>ztl.firefoxupdata.com</DomainNameObj:Value>
                    </cybox:Properties>
                </cybox:Object>
        </cybox:Observable>
    </stix:Observables>
</stix:STIX_Package>