AnalyzedEmails (Graph API) Endpoint - Domain Creation Date Always Wrong

Musle Shankar Rao, Manasa 0 Reputation points
2026-08-14T03:13:11.73+00:00

We try to export the domain creation date using Microsoft Defender AnalyzedEmails (Graph API) Endpoint, and every time the data is showing wrong results (it shows the standard date time format **eg. **Domain Creation:01 Jan 0001, 00:00:00 UTC)

We tried this with both beta version and version 1.0 API, unfortunately, it did not help. We also raised this ticket with Microsoft TrackingID#[Moderator note: Personally Identifiable Information removed]

 , the ticket was closed without resolution, asking us to seek direct support from Microsoft Graph API team.
https://learn.microsoft.com/en-us/graph/api/security-collaborationroot-list-analyzedemails?view=graph-rest-1.0&tabs=http
Would appreciate if you could help us in this matter.

Microsoft 365 and Office | Office Online Server
0 comments

1 answer

Sort by: Newest
Most helpful Newest Oldest
  1. Teddie Dang 1,185 Reputation points Independent Advisor
    2026-08-14T04:53:12.12+00:00

    Hi @Musle Shankar Rao, Manasa

    I can reproduce the issue you described. I tested the API with several different domains, and the result consistently shows:

    "domainCreationDateTime": "0001-01-01T00:00:00Z"

    User's image

    Based on this testing, I believe the domainCreationDateTime field is not being correctly populated by the backend service, rather than this being an issue with the API version or date-time formatting.

    As a fellow user like you, I can confirm the same behavior, but I don't have access to or the ability to intervene in the Microsoft product backend.

    At this point, I recommend raising the issue in the Microsoft Graph GitHub repository so that the product engineering team can investigate the behavior directly.

    Reference: Participating in a discussion - GitHub Docs

    If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.