{
  "schema_version": "0.3",
  "id": "host:rrthefirm-com.mail.protection.outlook.com",
  "type": "host",
  "label": "rrthefirm-com.mail.protection.outlook.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_50569ed7154a96c7fd305c44a5180a2b",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.194.170",
        "label": "52.101.194.170",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "d3fbbe14dac5d8cdc2af4018f1e8be3eb05b9562473ab4560abebd7e42943b07"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "52.101.194.170",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_4fe47b6b4494ed42c7071544090cd9f8",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.40.0",
        "label": "52.101.40.0",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "d3fbbe14dac5d8cdc2af4018f1e8be3eb05b9562473ab4560abebd7e42943b07"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "52.101.40.0",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_286bf4a7cc1c4c4fc62b70f1f70c7bc3",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.8.65",
        "label": "52.101.8.65",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "d3fbbe14dac5d8cdc2af4018f1e8be3eb05b9562473ab4560abebd7e42943b07"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "52.101.8.65",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_7012d0d5c3a303900f670480bcdc62db",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.8.71",
        "label": "52.101.8.71",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "d3fbbe14dac5d8cdc2af4018f1e8be3eb05b9562473ab4560abebd7e42943b07"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "52.101.8.71",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_838d1da05e743ffc36bb9c9c71af0408",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c918::3",
        "label": "2a01:111:f403:c918::3",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "641f6f4727ef4e3c3e0f0a6161e7c2b73847dbde3b284376537d04df6878895c"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "2a01:111:f403:c918::3",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_a6ef8a91ab3bba1993acabecd3b66630",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c927::1",
        "label": "2a01:111:f403:c927::1",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "641f6f4727ef4e3c3e0f0a6161e7c2b73847dbde3b284376537d04df6878895c"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "2a01:111:f403:c927::1",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_33edae7275456b574a3995dd8b4f928a",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c927::7",
        "label": "2a01:111:f403:c927::7",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "641f6f4727ef4e3c3e0f0a6161e7c2b73847dbde3b284376537d04df6878895c"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "2a01:111:f403:c927::7",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_e6070042e08326a73a0822b7583babe4",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f909::4",
        "label": "2a01:111:f403:f909::4",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:32Z",
      "evidence": [
        {
          "url": "dns:rrthefirm-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "641f6f4727ef4e3c3e0f0a6161e7c2b73847dbde3b284376537d04df6878895c"
          },
          "retrieved_at": "2026-10-23T16:44:32Z",
          "published_at": null,
          "quote": "2a01:111:f403:f909::4",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_4e7814c553e4f17d868855e8de2959fa",
      "revision": 1,
      "subject": "host:rrthefirm-com.mail.protection.outlook.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:rrthefirm.com",
        "label": "rrthefirm.com",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T14:32:18Z",
      "evidence": [
        {
          "url": "dns:rrthefirm.com?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "767c3b492dc96c40e9bc462405438815f6af9b48a3eafecef8ba61965a925d0a"
          },
          "retrieved_at": "2026-10-23T14:32:18Z",
          "published_at": null,
          "quote": "rrthefirm-com.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_bf8bfc4c11fa59ba0c947069204a7ae5"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-23T18:14:00Z",
  "updated_at": "2026-10-23T18:14:00Z",
  "content_hash": "2ff8134b80df6aff75ef5d1ae8d4dad1433bfdc81e66f1eab6231bfbc1f7e5ed",
  "license": "ENTITI-ATTR-1.0"
}