{
  "schema_version": "0.3",
  "id": "host:sacfire-org.mail.protection.outlook.com",
  "type": "host",
  "label": "sacfire-org.mail.protection.outlook.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_414bd0930bfdec1da335fa59bac9691b",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.41.204",
        "label": "52.101.41.204",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "c40e9113f74f36432126eaba3759030fdebaa9ba7b5ff03c035e7a207ea5d8ff"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "52.101.41.204",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_d51d292aaa2f3b028c01ecd1894fa65e",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.60.145",
        "label": "52.101.60.145",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "c40e9113f74f36432126eaba3759030fdebaa9ba7b5ff03c035e7a207ea5d8ff"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "52.101.60.145",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_67205d268355cd202b928aa37a902451",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.60.168",
        "label": "52.101.60.168",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "c40e9113f74f36432126eaba3759030fdebaa9ba7b5ff03c035e7a207ea5d8ff"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "52.101.60.168",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_8e78e9e36032d764ace7032e820e0cd3",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.60.170",
        "label": "52.101.60.170",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "c40e9113f74f36432126eaba3759030fdebaa9ba7b5ff03c035e7a207ea5d8ff"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "52.101.60.170",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_64a19c90e8ee677ccae36a7f73946c25",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c803::a",
        "label": "2a01:111:f403:c803::a",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "bbc28abb43a318060b37a4f5538895c40b5f4efccdd3a7dc7de19d250b5532f0"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "2a01:111:f403:c803::a",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_e44e4bd5d9fbbc780d427fdd48c23023",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c927::5",
        "label": "2a01:111:f403:c927::5",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "bbc28abb43a318060b37a4f5538895c40b5f4efccdd3a7dc7de19d250b5532f0"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "2a01:111:f403:c927::5",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_78e420a711c635fa26b7ad5572f97a5b",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f801::1",
        "label": "2a01:111:f403:f801::1",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "bbc28abb43a318060b37a4f5538895c40b5f4efccdd3a7dc7de19d250b5532f0"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "2a01:111:f403:f801::1",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_22b2d4dfe8c6dff2e79c16d4955b9893",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:f90b::5",
        "label": "2a01:111:f403:f90b::5",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T03:04:20Z",
      "evidence": [
        {
          "url": "dns:sacfire-org.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "bbc28abb43a318060b37a4f5538895c40b5f4efccdd3a7dc7de19d250b5532f0"
          },
          "retrieved_at": "2026-10-23T03:04:20Z",
          "published_at": null,
          "quote": "2a01:111:f403:f90b::5",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_0192c46deb6401311cef64ffc19ccb31",
      "revision": 1,
      "subject": "host:sacfire-org.mail.protection.outlook.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:sacfire.org",
        "label": "sacfire.org",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T14:16:00Z",
      "retrieved_at": "2026-10-23T00:45:02Z",
      "evidence": [
        {
          "url": "dns:sacfire.org?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "cc525598c55c1eae0c826c45c7944682cff1c11b5d8176f94f3cb5c37d749c3d"
          },
          "retrieved_at": "2026-10-23T00:45:02Z",
          "published_at": null,
          "quote": "sacfire-org.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_54660166ca4d92ce203d0d0a4d212d2b"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-23T14:16:00Z",
  "updated_at": "2026-10-23T14:16:00Z",
  "content_hash": "9f5d0a0a3639df1752a647b3c9c1e346662192bf98ac49d49721e7eef677f648",
  "license": "ENTITI-ATTR-1.0"
}