Incredible deep dive into an area most people overlook. The erosion of the WHOIS attribution chain and the exploitation of RFC 8805 geofeeds create massive challenges for threat intelligence and sanctions tracking. Thanks for shedding light on how industrial-scale obfuscation actually works.