{
  "schema_version": "0.3",
  "id": "host:toolsgroup-com.mail.protection.outlook.com",
  "type": "host",
  "label": "toolsgroup-com.mail.protection.outlook.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_486ec8e95d9e3b80076c0692171d48a5",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.103.36",
        "label": "52.101.103.36",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "61e530bab628cd3a6688b118fe5cb7052b9ccbd6b8a0612846e6a080c1e455d4"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "52.101.103.36",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_ab669138bad972e8b914746f76ee24ca",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.209.31",
        "label": "52.101.209.31",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "61e530bab628cd3a6688b118fe5cb7052b9ccbd6b8a0612846e6a080c1e455d4"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "52.101.209.31",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_5eefad7e94d521e34728b5cebc8fc2d0",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.73.123",
        "label": "52.101.73.123",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "61e530bab628cd3a6688b118fe5cb7052b9ccbd6b8a0612846e6a080c1e455d4"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "52.101.73.123",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_276a1085493144e63604885f291a4ddd",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.73.145",
        "label": "52.101.73.145",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "61e530bab628cd3a6688b118fe5cb7052b9ccbd6b8a0612846e6a080c1e455d4"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "52.101.73.145",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_6e9ec2647de4f60dcd3d6a0f3e795de1",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:c967::a",
        "label": "2a01:111:f403:c967::a",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "e1617ee8c9d44c72409390578f41444a9ac776b851ff136582a55e725bbf1a4c"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "2a01:111:f403:c967::a",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_2f65f8e3f73e41e4b13469bf37413eee",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca04::10",
        "label": "2a01:111:f403:ca04::10",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "e1617ee8c9d44c72409390578f41444a9ac776b851ff136582a55e725bbf1a4c"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca04::10",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_81d31ad0323475aa72c14d428376b9c8",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca21::a",
        "label": "2a01:111:f403:ca21::a",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "e1617ee8c9d44c72409390578f41444a9ac776b851ff136582a55e725bbf1a4c"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca21::a",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_1a3a3ce6dc7e33f5a131383156cf9844",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca3c::6",
        "label": "2a01:111:f403:ca3c::6",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:44:45Z",
      "evidence": [
        {
          "url": "dns:toolsgroup-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "e1617ee8c9d44c72409390578f41444a9ac776b851ff136582a55e725bbf1a4c"
          },
          "retrieved_at": "2026-10-23T16:44:45Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca3c::6",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_8a41b9c1f5bc1a4cddf5f56ecc048982",
      "revision": 1,
      "subject": "host:toolsgroup-com.mail.protection.outlook.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:toolsgroup.com",
        "label": "toolsgroup.com",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-23T18:14:00Z",
      "retrieved_at": "2026-10-23T16:10:14Z",
      "evidence": [
        {
          "url": "dns:toolsgroup.com?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "d745b607ae131f4edc3a00f61d6ebd0fcfacaa72de99830d0a66e896e8e14e04"
          },
          "retrieved_at": "2026-10-23T16:10:14Z",
          "published_at": null,
          "quote": "toolsgroup-com.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_c8b9641523ed07a76e7e1e1c93a6974d"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-23T18:14:00Z",
  "updated_at": "2026-10-23T18:14:00Z",
  "content_hash": "93391d2e7ce2087083c965db512fd5acad947f8b9c1cddeae2e9100a81330659",
  "license": "ENTITI-ATTR-1.0"
}