{
  "schema_version": "0.3",
  "id": "host:markmonitor-com.mail.protection.outlook.com",
  "type": "host",
  "label": "markmonitor-com.mail.protection.outlook.com",
  "aliases": [],
  "description": "",
  "tier": 2,
  "status": "active",
  "redirect_to": null,
  "fp_kind": null,
  "synthetic": false,
  "identifiers": {},
  "inbound_counts": {
    "mx_of": 1
  },
  "claims": [
    {
      "id": "k_f014a099d5677ca7ba2cf0fac6cf6fb1",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.89.0",
        "label": "52.101.89.0",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "975ad4ed9b2132e6c0524899112959c401e8a0c2dba16b003059af43d493f65e"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "52.101.89.0",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_f61066a7c5edfe88089b64b38bfc9d51",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.89.18",
        "label": "52.101.89.18",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "975ad4ed9b2132e6c0524899112959c401e8a0c2dba16b003059af43d493f65e"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "52.101.89.18",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_45f3130afc0e719665235de8b98b1f1c",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.89.2",
        "label": "52.101.89.2",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "975ad4ed9b2132e6c0524899112959c401e8a0c2dba16b003059af43d493f65e"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "52.101.89.2",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_666b41e8ef9fd10452b30864f9c7f4e3",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_a",
      "object": {
        "id": "ip:52.101.99.0",
        "label": "52.101.99.0",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=A",
          "capture": {
            "store": "ev",
            "sha256": "975ad4ed9b2132e6c0524899112959c401e8a0c2dba16b003059af43d493f65e"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "52.101.99.0",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_ac43692d19ed2d1c7d015b6e5aed2fa1",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca0b::",
        "label": "2a01:111:f403:ca0b::",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4da95c5fae5c8483e0bd05c1203bede7df8c2c82e90d5793191ddf28d748c419"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca0b::",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_3439379850d2abb346e681cb2935e2b7",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca0b::1",
        "label": "2a01:111:f403:ca0b::1",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4da95c5fae5c8483e0bd05c1203bede7df8c2c82e90d5793191ddf28d748c419"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca0b::1",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_7f1fc7f4c7dfdcceb59bef79cc7f144d",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca0b::6",
        "label": "2a01:111:f403:ca0b::6",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4da95c5fae5c8483e0bd05c1203bede7df8c2c82e90d5793191ddf28d748c419"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca0b::6",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_de5edfa007e89cc6a96557b5195ad4ea",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "dns_aaaa",
      "object": {
        "id": "ip:2a01:111:f403:ca1a::1",
        "label": "2a01:111:f403:ca1a::1",
        "type": "ip_address"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:23:52Z",
      "evidence": [
        {
          "url": "dns:markmonitor-com.mail.protection.outlook.com?type=AAAA",
          "capture": {
            "store": "ev",
            "sha256": "4da95c5fae5c8483e0bd05c1203bede7df8c2c82e90d5793191ddf28d748c419"
          },
          "retrieved_at": "2026-10-20T14:23:52Z",
          "published_at": null,
          "quote": "2a01:111:f403:ca1a::1",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": null
    },
    {
      "id": "k_9206df75707be8f7c7f17de01ba52e8c",
      "revision": 1,
      "subject": "host:markmonitor-com.mail.protection.outlook.com",
      "predicate": "mx_of",
      "object": {
        "id": "domain:markmonitor.com",
        "label": "markmonitor.com",
        "type": "domain"
      },
      "value": null,
      "datatype": "entity",
      "polarity": "positive",
      "epistemic": "asserted",
      "temporal": "unknown",
      "status": "current",
      "confidence": 0.95,
      "confidence_method": "tier_default/v1",
      "valid_from": null,
      "valid_to": null,
      "asserted_at": "2026-10-20T14:30:00Z",
      "retrieved_at": "2026-10-20T14:21:57Z",
      "evidence": [
        {
          "url": "dns:markmonitor.com?type=MX",
          "capture": {
            "store": "ev",
            "sha256": "f45d47b5ca86ae31857c546c304d20386ba269e28d4a9261aa10d34fb3a26ba7"
          },
          "retrieved_at": "2026-10-20T14:21:57Z",
          "published_at": null,
          "quote": "markmonitor-com.mail.protection.outlook.com",
          "tier": "registry",
          "locator": null,
          "media": null,
          "source_family": "dns",
          "method": "api",
          "extractor": {
            "name": "build_release",
            "version": "0.3.1"
          },
          "rights": {
            "holder": "Authoritative DNS operator",
            "license": "public-record",
            "basis": "public_record",
            "display": true,
            "export": true,
            "train": true,
            "policy_version": "2026-10-20"
          }
        }
      ],
      "derived_from": [],
      "derivation": null,
      "qualifiers": {},
      "negation": null,
      "supersedes": null,
      "mirror_of": "k_5495781e2772581ddb6ae474d40bcec7"
    }
  ],
  "media": [],
  "version": 1,
  "created_at": "2026-10-20T14:30:00Z",
  "updated_at": "2026-10-20T14:30:00Z",
  "content_hash": "6f0f58db571debcc0e712a1319de11cc33f15e07f0f018fc4722cec067240832",
  "license": "EW-ATTR-1.0"
}