{
  "schema_version": "0.3",
  "id": "host:phrma-org.mail.protection.outlook.com",
  "type": "host",
  "label": "phrma-org.mail.protection.outlook.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_6adf7d9f695d78e839495e3876278d77",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.202.147",
        "label": "52.101.202.147",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "64b1455e95e495fd4d235ac11d3624df19beccc6c33d37721836b97567b6c34d"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "52.101.202.147",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_9a2e590418d5e1ef1ca3339d0f6140e7",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.40.26",
        "label": "52.101.40.26",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "64b1455e95e495fd4d235ac11d3624df19beccc6c33d37721836b97567b6c34d"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "52.101.40.26",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_5a3bebebde6f91db4abfecce7813fbbe",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.41.198",
        "label": "52.101.41.198",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "64b1455e95e495fd4d235ac11d3624df19beccc6c33d37721836b97567b6c34d"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "52.101.41.198",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_2da5d1b0dfcc96645b7c5afe6eda563a",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.60.2",
        "label": "52.101.60.2",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "64b1455e95e495fd4d235ac11d3624df19beccc6c33d37721836b97567b6c34d"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "52.101.60.2",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_bb8633bcc85973f8cf73e6541904adf0",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c946::16",
        "label": "2a01:111:f403:c946::16",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4db7db057c011b5c2e1b8a463bce1aff4681931b3eebca8146f02515775c5991"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "2a01:111:f403:c946::16",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_6c66afd2772855aaacde9c975439928d",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f909::",
        "label": "2a01:111:f403:f909::",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4db7db057c011b5c2e1b8a463bce1aff4681931b3eebca8146f02515775c5991"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "2a01:111:f403:f909::",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_f8441a97d26d132e5c719b9968fbc9bc",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f909::5",
        "label": "2a01:111:f403:f909::5",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4db7db057c011b5c2e1b8a463bce1aff4681931b3eebca8146f02515775c5991"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "2a01:111:f403:f909::5",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_fc0ecfe503840f669f1cd6668a2b8f57",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f909::d",
        "label": "2a01:111:f403:f909::d",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:25Z",
      "evidence": [
        {
          "url": "dns:phrma-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4db7db057c011b5c2e1b8a463bce1aff4681931b3eebca8146f02515775c5991"
          },
          "retrieved_at": "2026-10-23T16:44:25Z",
          "published_at": null,
          "quote": "2a01:111:f403:f909::d",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_c333dc7e7e0fde6191aace4e617f4361",
      "revision": 1,
      "subject": "host:phrma-org.mail.protection.outlook.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:phrma.org",
        "label": "phrma.org",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:34:06Z",
      "evidence": [
        {
          "url": "dns:phrma.org?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "c9eb5ea675753e01020fbcac47a5abd19c4789167c72429cd23bc7833c5a8ef8"
          },
          "retrieved_at": "2026-10-23T16:34:06Z",
          "published_at": null,
          "quote": "phrma-org.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_5dc0727409d6b2dd5c43f51c2f684539"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-23T18:14:00Z",
  "updated_at": "2026-10-23T18:14:00Z",
  "content_hash": "e4411f74eee9a82c9c9d1b805cd8229d52d01f3a7e573751f1ad32c51f08c055",
  "license": "ENTITI-ATTR-1.0"
}