Domain -> IP Address Resolution Characterization - TLO

example.json

{
  "type": "package",
  "spec_version": "stix-2.0",
  "objects": [
    {
      "type": "domain-name-object",
      "id": "domain-name--1",
      "spec_version": "cybox-3.0",
      "value":"http://foo.bar.com"
    },
    {
      "type": "ipv4-addr-object",
      "id": "ip-address--1",
      "spec_version": "cybox-3.0",
      "value": "1.2.3.4"
    },
  ],
  "observations": [
    {
      "type": "observation",
      "id": "observation--4",
      "spec_version": "stix-2.0",
      "created_at": "2016-03-21T01:01:01Z",
      "observed_at": "2016-03-21T01:01:01Z",
      "object_ref" : "domain-name--1"
    }
  ],
  "relationships": [
    {
      "type": "object-relationship",
      "id": "object-relationship--1",
      "spec_version": "cybox-3.0",
      "source_ref": "domain-name--1",
      "target_ref": "ip-address--1",
      "kind_of_relationship": "resolved-to"
    },
  ]
}