{
  "schema_version": "0.3",
  "id": "host:alt1.us.email.fireeyecloud.com",
  "type": "host",
  "label": "alt1.us.email.fireeyecloud.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_e6274577144179b4a13528349c220e03",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:3.93.93.51",
        "label": "3.93.93.51",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "3.93.93.51",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_509b0021ebb93fa8f005c76961048cae",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:3.93.93.52",
        "label": "3.93.93.52",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "3.93.93.52",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_7f61d791cd3447c6db7db74a77d71478",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:3.93.93.53",
        "label": "3.93.93.53",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "3.93.93.53",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_4f862d6a45f600ed50b3b061a7947a25",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:34.223.36.121",
        "label": "34.223.36.121",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "34.223.36.121",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_8edaa75a39a246d6cd7aa0be692df843",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:34.223.36.122",
        "label": "34.223.36.122",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "34.223.36.122",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_c17b7fea4cab5baafe6e93fc2aac561b",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:34.223.36.123",
        "label": "34.223.36.123",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:40:43Z",
      "evidence": [
        {
          "url": "dns:alt1.us.email.fireeyecloud.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "ad875a2b10f6637ca569173346b0297c71718c71f04e2699c2cf213fd8a62f37"
          },
          "retrieved_at": "2026-10-23T16:40:43Z",
          "published_at": null,
          "quote": "34.223.36.123",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_c328c1542e772756376c3a8110032ab4",
      "revision": 1,
      "subject": "host:alt1.us.email.fireeyecloud.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:whdh.com",
        "label": "whdh.com",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T15:05:22Z",
      "evidence": [
        {
          "url": "dns:whdh.com?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "b6238c7efbc6f394f1109ad0718cf2996b7358f4dabcdcf0f84e52eecc13f026"
          },
          "retrieved_at": "2026-10-23T15:05:22Z",
          "published_at": null,
          "quote": "alt1.us.email.fireeyecloud.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_5bfff752a726c499ac4a8a6000971e69"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-23T18:14:00Z",
  "updated_at": "2026-10-23T18:14:00Z",
  "content_hash": "8ccbbda2823eef9f697cd972011b6d37a191c27fa9f4f2c7083c2082ae354e36",
  "license": "ENTITI-ATTR-1.0"
}