{
    "ok": true,
    "slug": "canon.com-2026-03-27",
    "stats": {
        "subs": 2535,
        "all": 2535,
        "resolved": 803,
        "live": 554,
        "takeover": 28,
        "juicy": 52,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/canon.com-2026-03-27",
    "takeover_candidates": [
        "apiservicedev.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkong-alb-dev-556754593.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ars-dev.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdyie0z4557w8b.cloudfront.net\u001b[0m]",
        "ars-qa.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pcq6pxbb76aa.cloudfront.net\u001b[0m]",
        "ars.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2plln8xj85avh.cloudfront.net\u001b[0m]",
        "auth.visioncast.dis.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdm6l64irt53rn.cloudfront.net\u001b[0m]",
        "caniprint.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md120h28iz7ocoy.cloudfront.net\u001b[0m]",
        "fs.ciis.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfs-rs-publi-tt8dablsedfv-23151690.us-west-1.elb.amazonaws.com\u001b[0m]",
        "gtest.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdnxur82u2rmv0.cloudfront.net\u001b[0m]",
        "lfpeservice.stg.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlfp-eservice-http-lb-stg-258129301.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mbapp-dev.dis.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md4smlh8zf8srm.cloudfront.net\u001b[0m]",
        "mbapp-qa.dis.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2v7v59xu8yi06.cloudfront.net\u001b[0m]",
        "mbapp-staging.dis.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbfnrsi5b1y.cloudfront.net\u001b[0m]",
        "mi.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21ypygmw9uuhs.cloudfront.net\u001b[0m]",
        "opa-adm.cig2.cla.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-opa-admin-elb-01-2091502536.us-east-1.elb.amazonaws.com\u001b[0m]",
        "opa-adm.cig2.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-opa-admin-elb-01-2091502536.us-east-1.elb.amazonaws.com\u001b[0m]",
        "passport.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md391lnt92c80si.cloudfront.net\u001b[0m]",
        "qa.rss.ciis.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfs-rss-qa-1467481844.us-west-1.elb.amazonaws.com\u001b[0m]",
        "quickscan.ciis.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mquickscan-ciis-lb-prod-231438780.us-west-1.elb.amazonaws.com\u001b[0m]",
        "rss.ciis.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfs-rs-publi-tt8dablsedfv-23151690.us-west-1.elb.amazonaws.com\u001b[0m]",
        "scan.ciis.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mquickscan-ciis-lb-prod-231438780.us-west-1.elb.amazonaws.com\u001b[0m]",
        "scan.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mquickscan-alb-prod-668225730.us-west-1.elb.amazonaws.com\u001b[0m]",
        "unbe-adm.sxg.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msxgnbeelb06-191372781.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "unbe.cev.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mceviimselb01-612155285.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "unbe.sxg.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msxgnbeelb05-1765561252.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "ustg-nbe-adm.sxg.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msxgnbeelb08-1398741060.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "ustg-nbe.sxg.cusa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msxgnbeelb07-845563983.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "www.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdf5dp4a5o2vt7.cloudfront.net\u001b[0m]",
        "www.cig.usa.canon.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md219f9vc9foiba.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "canon.com",
        "version": 4,
        "generated_at": "2026-03-27T16:16:48.906Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 9,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 9,
            "deep_skipped_below_pool": 8
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "auth.visioncast.dis.cusa.canon.com",
                "cname": "dm6l64irt53rn.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ để kết luận có thể chiếm quyền. Dịch vụ CloudFront của AWS thường được quản lý chặt, và đây có thể là endpoint chưa cấu hình hoặc đã dừng nhưng vẫn thuộc kiểm soát của chủ sở hữu hợp pháp.",
                "llm_labeled_at": "2026-03-27T16:16:55.022Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "auth.visioncast.dis.cusa.canon.com"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-27T16:16:55.022Z",
            "usage": {
                "prompt_tokens": 389,
                "completion_tokens": 142,
                "total_tokens": 531,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 261
            }
        }
    }
}