{
  "schema_version": "0.3",
  "id": "domain:phrma.org",
  "type": "domain",
  "label": "phrma.org",
  "aliases": [],
  "description": "Domain of Pharmaceutical Manufacturers.",
  "tier": 1,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {
    "domain": [
      "phrma.org"
    ]
  },
  "inbound_counts": {
    "in_cert_san": 1
  },
  "claims": [
    {
      "id": "k_b31b3b8ad55a522c77ef174081d9de26",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "tld_of",
      "object": {
        "id": "tld:org",
        "label": ".org",
        "type": "tld"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "phrma.org",
          "tier": "registry",
          "locator": "jsonpath:$.ldhName",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_113118e334b890113412ea5b2f3297a5",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "registrar",
      "object": {
        "id": "network-solutions-llc",
        "label": "Network Solutions, LLC",
        "type": "organization"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "Network Solutions, LLC",
          "tier": "registry",
          "locator": "jsonpath:$.entities[?(@.roles[0]=='registrar')].vcardArray",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_d469936c57f36b1d56f03d29ba188a08",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "registration_date",
      "object": null,
      "value": "1994-10-06",
      "datatype": "date",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "1994-10-06T04:00:00.906Z",
          "tier": "registry",
          "locator": "jsonpath:$.events[?(@.eventAction=='registration')].eventDate",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_c48e4c5ee9594bb223eadb29cf5780c3",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "expiration_date",
      "object": null,
      "value": "2029-10-05",
      "datatype": "date",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "2029-10-05T04:00:00Z",
          "tier": "registry",
          "locator": "jsonpath:$.events[?(@.eventAction=='expiration')].eventDate",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_26909714e55a9e228be81259ea7e8464",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "nameserver",
      "object": {
        "id": "host:ns17.worldnic.com",
        "label": "ns17.worldnic.com",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=NS",
          "capture": {
            "store": "ev",
            "sha256": "b3d64b4bbcffdf4696a0d9eedaad8791d3746dcff96e2244eea63fe354298ba9"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "ns17.worldnic.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        },
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "ns17.worldnic.com",
          "tier": "registry",
          "locator": "jsonpath:$.nameservers[*].ldhName",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_16656a0ad7eaf087030ff110648e6607",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "nameserver",
      "object": {
        "id": "host:ns18.worldnic.com",
        "label": "ns18.worldnic.com",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=NS",
          "capture": {
            "store": "ev",
            "sha256": "b3d64b4bbcffdf4696a0d9eedaad8791d3746dcff96e2244eea63fe354298ba9"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "ns18.worldnic.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        },
        {
          "url": "https://rdap.org/domain/phrma.org",
          "capture": {
            "store": "ev",
            "sha256": "f6876711df2ebb8dc25e710306bcdba3814e3801ed84ce0ed4c0610e4ffd4e79"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "ns18.worldnic.com",
          "tier": "registry",
          "locator": "jsonpath:$.nameservers[*].ldhName",
          "media": null,
          "source_family": "icann-rdap",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "ICANN-accredited registrar or registry RDAP service",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_ed258e5470213599b9e4e3f360ac22ae",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "dns_a",
      "object": {
        "id": "ip:172.170.116.53",
        "label": "172.170.116.53",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:05Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=A",
          "capture": {
            "store": "ev",
            "sha256": "d4bea42d56af5c88e3880fac6b3d1ac10dbc63254da96f0d327a3aae89deb545"
          },
          "retrieved_at": "2026-10-23T16:34:05Z",
          "published_at": null,
          "quote": "172.170.116.53",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_5dc0727409d6b2dd5c43f51c2f684539",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "dns_mx",
      "object": {
        "id": "host:phrma-org.mail.protection.outlook.com",
        "label": "phrma-org.mail.protection.outlook.com",
        "type": "host"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "c9eb5ea675753e01020fbcac47a5abd19c4789167c72429cd23bc7833c5a8ef8"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": "phrma-org.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_4e78a35ea1f377d66821df5a78a5367d",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "dns_txt",
      "object": null,
      "value": "v=spf1 include:spf.protection.outlook.com include:spfa.mailendo.com include:_spf.psm.knowbe4.com ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:23.23.237.28 ip4:149.72.147.186 ip4:167.89.101.239 ip4:168.245.40.44 ip4:142.0.180.120 -all",
      "datatype": "string",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=TXT",
          "capture": {
            "store": "ev",
            "sha256": "aad931ebc18ad75219153fd0cb8a08bf375231f6fd583f49871fd481363bf286"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": "v=spf1 include:spf.protection.outlook.com include:spfa.mailendo.com include:_spf.psm.knowbe4.com ip4:199.255.192.0/22 ip",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_5e570cbb43d5fcaa038d43136a127d3b",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "dmarc_policy",
      "object": null,
      "value": "reject",
      "datatype": "string",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "dns:_dmarc.phrma.org?type=TXT",
          "capture": {
            "store": "ev",
            "sha256": "e7692de8b7b3a3809e0ffe5925f7443b56e60abfee7296b0fb63290c74ae6411"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": "p=reject",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_387ac7fe154fff0c81e5fec8e2440d41",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "tls_certificate",
      "object": {
        "id": "fp:cert:1283a7468b50aa6bb7a5708b97fe00ed4e7e3d4cbf0e1d711ce99af768a14dad",
        "label": "cert:1283a7468b50",
        "type": "fingerprint"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-07-17",
      "valid_to": "2027-01-31",
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "https://phrma.org/",
          "capture": {
            "store": "ev",
            "sha256": "1283a7468b50aa6bb7a5708b97fe00ed4e7e3d4cbf0e1d711ce99af768a14dad"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:leaf",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_5ac91ded11e05b92e32de5b3695ccf84",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "favicon_hash",
      "object": {
        "id": "fp:favicon:acb4c026c692e320cd903c21ccb230fb884490bbc15b5c1d3aa3ff4a6e9a9ac2",
        "label": "favicon:acb4c026c692",
        "type": "fingerprint"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.9,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:08Z",
      "evidence": [
        {
          "url": "https://phrma.org/favicon.ico",
          "capture": {
            "store": "ev",
            "sha256": "acb4c026c692e320cd903c21ccb230fb884490bbc15b5c1d3aa3ff4a6e9a9ac2"
          },
          "retrieved_at": "2026-10-23T16:34:08Z",
          "published_at": null,
          "quote": null,
          "tier": "primary",
          "locator": null,
          "media": null,
          "source_family": "self",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Pharmaceutical Manufacturers",
            "license": "unknown",
            "basis": "unknown",
            "display": true,
            "export": false,
            "train": false,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_853a91754948a88d75d8a2bb1bed12ad",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "uses_tracker",
      "object": {
        "id": "fp:gtm:gtm-kwcrbjk",
        "label": "GTM-KWCRBJK",
        "type": "fingerprint"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.9,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-10-23",
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:08Z",
      "evidence": [
        {
          "url": "https://phrma.org/",
          "capture": {
            "store": "ev",
            "sha256": "0efa08a4c416ce8cec6415abdcb968a55f81a2c7fbe400661b77e2406bfc9c8e"
          },
          "retrieved_at": "2026-10-23T16:34:08Z",
          "published_at": null,
          "quote": null,
          "tier": "primary",
          "locator": "css:script",
          "media": null,
          "source_family": "self",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Pharmaceutical Manufacturers",
            "license": "all-rights-reserved",
            "basis": "fair_use_excerpt",
            "display": true,
            "export": false,
            "train": false,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_6b9022dccb83010012daeba9c9fe0712",
      "revision": 4,
      "subject": "domain:phrma.org",
      "predicate": "hosting_provider",
      "object": {
        "id": "microsoft",
        "label": "Microsoft",
        "type": "organization"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "inferred",
      "confidence": 0.7,
      "confidence_method": "rule:hosting_from_asn/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": null,
      "evidence": [],
      "derived_from": [
        "o_ef501772b822e46e2e6526b854e4b682",
        "o_abfae6cf13edd06fd6fde6bfa4b95d7f"
      ],
      "derivation": {
        "method": "rule:hosting_from_asn/v1",
        "version": "1",
        "ran_at": "2026-10-23T19:51:00Z"
      },
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_b04584e6ec238f2efa08f30f35444872",
      "revision": 1,
      "subject": "domain:phrma.org",
      "predicate": "in_cert_san",
      "object": {
        "id": "fp:cert:1283a7468b50aa6bb7a5708b97fe00ed4e7e3d4cbf0e1d711ce99af768a14dad",
        "label": "cert:1283a7468b50",
        "type": "fingerprint"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "current",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": "2026-07-17",
      "valid_to": "2027-01-31",
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "https://phrma.org/",
          "capture": {
            "store": "ev",
            "sha256": "1283a7468b50aa6bb7a5708b97fe00ed4e7e3d4cbf0e1d711ce99af768a14dad"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": null,
          "tier": "registry",
          "locator": "x509:subjectAltName",
          "media": null,
          "source_family": "tls-handshake",
          "method": "fetch",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Certificate holder and issuing CA (X.509 certificate)",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_c99d088996b2fea0e14dd6160b659bf7"
    }
  ],
  "media": [],
  "version": 4,
  "created_at": "2026-10-23T18:14:00Z",
  "updated_at": "2026-10-23T19:51:00Z",
  "content_hash": "e9b966a6159ccfae7c31f056ec7fd1c87284e852b3696d407f1c1fafb00b64cf",
  "license": "ENTITI-ATTR-1.0"
}