{
    "ok": true,
    "slug": "capgemini.com-2026-03-27",
    "stats": {
        "subs": 4698,
        "all": 4698,
        "resolved": 1397,
        "live": 517,
        "takeover": 26,
        "juicy": 46,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/capgemini.com-2026-03-27",
    "takeover_candidates": [
        "automation.dev.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md7yeupjgszt7f.cloudfront.net\u001b[0m]",
        "bsm.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbsm-euc1-grafana-lb-987167397.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "ccpvaultupgrade.dev.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ccp-vault-upgrade-alb-1132201345.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dir-am-s.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-pingdirectory-nlb-1dbd253aabdcc943.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "dir-am.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-pingdirectoryunity-nlb2-1606469b0a9f82b7.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "dopfed-am-p.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-doppingfederaterportal-alb-1604811511.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "dopfed-am-s.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-s-doppingfederaterportal-alb-356223722.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "dopidaas.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-via-dop-alb-1-269616020.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "enecoidaas.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-via-eneco-alb-1-300863183.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "engage.edge.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mengage-766479148.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "gdsc.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3q6mxmiqhvwy8.cloudfront.net\u001b[0m]",
        "hallmark.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-hallmarklb-2034608278.us-east-1.elb.amazonaws.com\u001b[0m]",
        "iam.infra.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-via-infra-alb-1-1875336517.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "internal-dir-am.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec1-p-pingdirectory-nlb2-int-a9a5e606caaee9a4.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "internal.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mccp-internal-portal-redirector-1511649771.us-east-1.elb.amazonaws.com\u001b[0m]",
        "keystore.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-keystoreha-162267369.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mon-internal.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-zabbix-ha-internal-1235712661.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mon.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzabbixnlb-acaf6a74b7836a0f.elb.us-east-1.amazonaws.com\u001b[0m]",
        "prelogs.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpreprod-graylog-993006338.us-east-1.elb.amazonaws.com\u001b[0m]",
        "premon.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzabbix-preprod-538987777.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa-enecoidaas.security.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-18-196-111-219.eu-central-1.compute.amazonaws.com\u001b[0m]",
        "stackstorm.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-stackstorm-ha-915301548.us-east-1.elb.amazonaws.com\u001b[0m]",
        "tsm.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dsm-alb-internal-12-61974084.us-east-1.elb.amazonaws.com\u001b[0m]",
        "vault.ccp.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-vaultprod-87996115.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ww2.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2hkw62kanodol.cloudfront.net\u001b[0m]",
        "www.ideaonaw.capgemini.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-dev-ideaweba-1422418ba4-153631574.us-east-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "capgemini.com",
        "version": 5,
        "generated_at": "2026-03-27T16:57:13.530Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 3,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 2
        },
        "candidates": [
            {
                "host": "ww2.capgemini.com",
                "cname": "d2hkw62kanodol.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng lỗi 502 'request could not be satisfied' thường là lỗi cấu hình hoặc backend, không phải trang chưa claim. Không có bằng chứng resource bị bỏ trống.",
                "llm_labeled_at": "2026-03-27T16:57:19.367Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/ww2.capgemini.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "ww2.capgemini.com"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-27T16:57:19.367Z",
            "usage": {
                "prompt_tokens": 407,
                "completion_tokens": 104,
                "total_tokens": 511,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 279
            }
        },
        "v5": {
            "processed_at": "2026-03-27T16:57:19.448Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "capgemini.com-2026-03-27"
        }
    }
}