{
    "ok": true,
    "slug": "cigna.com-2026-03-28",
    "stats": {
        "subs": 2373,
        "all": 2373,
        "resolved": 1424,
        "live": 708,
        "takeover": 141,
        "juicy": 141,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/cigna.com-2026-03-28",
    "takeover_candidates": [
        "a.login.my.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-mycigna-test-2134914845.us-east-1.elb.amazonaws.com\u001b[0m]",
        "accenture.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15r05zwcwvh3a.cloudfront.net\u001b[0m]",
        "aep-pdp-challenger.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3je1dtsmw0jqn.cloudfront.net\u001b[0m]",
        "aep-pdp-challenger.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1on36j5q9y997.cloudfront.net\u001b[0m]",
        "aep-pdp-challenger.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tj8ahct31gx6.cloudfront.net\u001b[0m]",
        "aep-pdp-challenger.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2uqjri3jj6fsh.cloudfront.net\u001b[0m]",
        "aep-pdp-control.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md331u5a619dgfm.cloudfront.net\u001b[0m]",
        "aep-pdp-control.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1x4yvlcu50ie1.cloudfront.net\u001b[0m]",
        "aep-pdp-control.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1rlg1zviic9c8.cloudfront.net\u001b[0m]",
        "aep-pdp-control.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlzj01gnwqmk1.cloudfront.net\u001b[0m]",
        "amazon.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdc85fpcsafxjk.cloudfront.net\u001b[0m]",
        "amazon.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxrroz45b7wco.cloudfront.net\u001b[0m]",
        "amazon.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md24sm51ne2hrl0.cloudfront.net\u001b[0m]",
        "amazon.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md23sy7pe2m2z7i.cloudfront.net\u001b[0m]",
        "basf.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpmqobrnz43b1.cloudfront.net\u001b[0m]",
        "campaigns.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1iqus6x6pgpsu.cloudfront.net\u001b[0m]",
        "citizensbank.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu2m49zbnrbpt.cloudfront.net\u001b[0m]",
        "clearandsimple.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md17gvt28922wm9.cloudfront.net\u001b[0m]",
        "connections.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p0qnnu81iieg.cloudfront.net\u001b[0m]",
        "cosd.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmxa2qhzu3rzn.cloudfront.net\u001b[0m]",
        "d.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3n90f6tk58dk8.cloudfront.net\u001b[0m]",
        "d.login.my.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-mycigna-dev-1995755996.us-east-1.elb.amazonaws.com\u001b[0m]",
        "d.universal-login.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-uni-login-cigna-dev-1404510542.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcws-dev.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xgnqy46n7npc.cloudfront.net\u001b[0m]",
        "dcws-rel.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lm9fjbvgd4wp.cloudfront.net\u001b[0m]",
        "dental-dna.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ea8y1sk26m4y.cloudfront.net\u001b[0m]",
        "dev-accenture.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdv2xdcmkw1x2d.cloudfront.net\u001b[0m]",
        "dev-basf.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p58b7gy81b2d.cloudfront.net\u001b[0m]",
        "dev-campaigns.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3twglt7tq69kw.cloudfront.net\u001b[0m]",
        "dev-citizensbank.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36sl948quog9r.cloudfront.net\u001b[0m]",
        "dev-clearandsimple.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md107oa5g457o0i.cloudfront.net\u001b[0m]",
        "dev-connections.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md19snqt0s5hpi5.cloudfront.net\u001b[0m]",
        "dev-cosd.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nhc76epm07j0.cloudfront.net\u001b[0m]",
        "dev-dental-dna.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1aozky9u9nvw0.cloudfront.net\u001b[0m]",
        "dev-digital.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1iybhdq6o2yqp.cloudfront.net\u001b[0m]",
        "dev-disclosures.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fe4hygq7rwhj.cloudfront.net\u001b[0m]",
        "dev-disney.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tv00yeegsqbo.cloudfront.net\u001b[0m]",
        "dev-disneyhr.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3cy4og76bes2h.cloudfront.net\u001b[0m]",
        "dev-jpmc.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pkotsfgyibv.cloudfront.net\u001b[0m]",
        "dev-legacy.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tz1k0fb3gu7p.cloudfront.net\u001b[0m]",
        "dev-medicareproviders.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37u4ylw9iams8.cloudfront.net\u001b[0m]",
        "dev-plans.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlwuqn5hh0tdj.cloudfront.net\u001b[0m]",
        "dev-prudential.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1r6c9ffr3j39.cloudfront.net\u001b[0m]",
        "dev-saveourhealthcare.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md33y02k7nl00nv.cloudfront.net\u001b[0m]",
        "dev-socal.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1u1wuek988q1h.cloudfront.net\u001b[0m]",
        "dev-stateofct.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1itnv31u8ql4c.cloudfront.net\u001b[0m]",
        "dev-stateoftn.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md33fspzgxsp5s8.cloudfront.net\u001b[0m]",
        "dev.login.developer.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-cigna-dev-1090663593.us-east-1.elb.amazonaws.com\u001b[0m]",
        "disclosures.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2veqls69qbhr0.cloudfront.net\u001b[0m]",
        "discoverhealthyrewards.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tti88av4u3r3.cloudfront.net\u001b[0m]",
        "discoverhealthyrewards.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2b3okjexajblh.cloudfront.net\u001b[0m]",
        "discoverhealthyrewards.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nso1tymszam8.cloudfront.net\u001b[0m]",
        "discoverhealthyrewards.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1w90nm1yco1ac.cloudfront.net\u001b[0m]",
        "disney.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2aex6404nhvtv.cloudfront.net\u001b[0m]",
        "disneyhr.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md11zubhpdl4qg4.cloudfront.net\u001b[0m]",
        "eapmanager.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2e2d5xq64sfmo.cloudfront.net\u001b[0m]",
        "flagship.hs.mobconfig.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-hs-mobconf-prod-2099687253.us-east-1.elb.amazonaws.com\u001b[0m]",
        "flagship.usmed.mobconfig.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-usmed-mobconf-prod-2091391596.us-east-1.elb.amazonaws.com\u001b[0m]",
        "gcms.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2fn95foachucj.cloudfront.net\u001b[0m]",
        "gcms.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qgf7y2mcvb0z.cloudfront.net\u001b[0m]",
        "gcms.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1c9t07j25jgg9.cloudfront.net\u001b[0m]",
        "geico.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmnoy1v4p2rwv.cloudfront.net\u001b[0m]",
        "geico.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2rw3nqvo4xbkx.cloudfront.net\u001b[0m]",
        "geico.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1krb70aqf6zw0.cloudfront.net\u001b[0m]",
        "geico.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md281xlo9kzjmkp.cloudfront.net\u001b[0m]",
        "github-docs.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcigna-group-infrastructure-services.github.io\u001b[0m]",
        "healthassessment.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1a10mp9gk79wd.cloudfront.net\u001b[0m]",
        "healthassessment.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtzepc4cepdny.cloudfront.net\u001b[0m]",
        "healthassessment.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md22ko9m1q36m7h.cloudfront.net\u001b[0m]",
        "healthassessment.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdg7v2n4a8o4u9.cloudfront.net\u001b[0m]",
        "hs.mobconfig.test.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-hs-mobconf-test-1626990259.us-east-1.elb.amazonaws.com\u001b[0m]",
        "int.login.developer.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-cigna-test-1368082515.us-east-1.elb.amazonaws.com\u001b[0m]",
        "jpmc.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md10yeczi51sj3e.cloudfront.net\u001b[0m]",
        "legacy.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md22742xxup5zvt.cloudfront.net\u001b[0m]",
        "medicareproviders.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tgmpr4b4r7dm.cloudfront.net\u001b[0m]",
        "other.hs.mobconfig.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-hs-mobconf-prod-2099687253.us-east-1.elb.amazonaws.com\u001b[0m]",
        "other.usmed.mobconfig.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-usmed-mobconf-prod-2091391596.us-east-1.elb.amazonaws.com\u001b[0m]",
        "p.login.developer.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-cigna-prod-272118464.us-east-1.elb.amazonaws.com\u001b[0m]",
        "p.login.my.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-mycigna-prod-678433465.us-east-1.elb.amazonaws.com\u001b[0m]",
        "p.universal-login.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-uni-login-cigna-prod-1630199742.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pathwellspecialty.dev.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3sdaf60qedz8n.cloudfront.net\u001b[0m]",
        "pathwellspecialty.qa.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hel2wrcwk1mo.cloudfront.net\u001b[0m]",
        "pathwellspecialty.rel.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3lp0qh5wl7dqq.cloudfront.net\u001b[0m]",
        "pathwellspecialty.sites.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxnixdnijn4td.cloudfront.net\u001b[0m]",
        "plans.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ff1lb40j4je8.cloudfront.net\u001b[0m]",
        "prudential.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md38blnt8ogh47c.cloudfront.net\u001b[0m]",
        "pvs.login.developer.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-cigna-test-1368082515.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pvs.universal-login.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-uni-login-cigna-test-846671016.us-east-1.elb.amazonaws.com\u001b[0m]",
        "q.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1mtd0dkbczwx2.cloudfront.net\u001b[0m]",
        "qa-accenture.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md7vwyuwx51mei.cloudfront.net\u001b[0m]",
        "qa-basf.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2c5gplnc6l36z.cloudfront.net\u001b[0m]",
        "qa-campaigns.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md33e4qlrjxokwe.cloudfront.net\u001b[0m]",
        "qa-citizensbank.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2kb9sio04wf75.cloudfront.net\u001b[0m]",
        "qa-clearandsimple.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xod7znmdtgib.cloudfront.net\u001b[0m]",
        "qa-connections.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3lptc259490zc.cloudfront.net\u001b[0m]",
        "qa-cosd.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12l8dithxxbek.cloudfront.net\u001b[0m]",
        "qa-dental-dna.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md168am9yde4bqv.cloudfront.net\u001b[0m]",
        "qa-digital.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gfpo3nxsq9og.cloudfront.net\u001b[0m]",
        "qa-disclosures.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wbxplfx050gr.cloudfront.net\u001b[0m]",
        "qa-disney.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2b8zik24w3vhi.cloudfront.net\u001b[0m]",
        "qa-disneyhr.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1mlej84rzofmq.cloudfront.net\u001b[0m]",
        "qa-jpmc.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2msuytstfzq5j.cloudfront.net\u001b[0m]",
        "qa-legacy.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2knch8zshmu7u.cloudfront.net\u001b[0m]",
        "qa-medicareproviders.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md16ne0ih81ble8.cloudfront.net\u001b[0m]",
        "qa-plans.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1m2j3d649kyay.cloudfront.net\u001b[0m]",
        "qa-prudential.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mddkck941vutad.cloudfront.net\u001b[0m]",
        "qa-saveourhealthcare.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3p53u5vh9tbz9.cloudfront.net\u001b[0m]",
        "qa-socal.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md7ddkc06jtbn.cloudfront.net\u001b[0m]",
        "qa-stateofct.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3bkksyio3k9xa.cloudfront.net\u001b[0m]",
        "qa-stateoftn.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nol7wvuxolx9.cloudfront.net\u001b[0m]",
        "rel-accenture.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md31u9txjnw8qqr.cloudfront.net\u001b[0m]",
        "rel-basf.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md23tdjs61dmsg3.cloudfront.net\u001b[0m]",
        "rel-campaigns.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdaeb7kt6hccaj.cloudfront.net\u001b[0m]",
        "rel-citizensbank.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mds53leuyiqdiw.cloudfront.net\u001b[0m]",
        "rel-clearandsimple.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mds8wh9383lx.cloudfront.net\u001b[0m]",
        "rel-connections.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cuj0r9fkmrak.cloudfront.net\u001b[0m]",
        "rel-cosd.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tlul2qgvf5k0.cloudfront.net\u001b[0m]",
        "rel-dental-dna.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3olqarf6uddya.cloudfront.net\u001b[0m]",
        "rel-digital.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdn7q347pwode1.cloudfront.net\u001b[0m]",
        "rel-disclosures.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zgzmnugggsvd.cloudfront.net\u001b[0m]",
        "rel-disney.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpnji0pvpgw4x.cloudfront.net\u001b[0m]",
        "rel-disneyhr.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36ysxjvbt527z.cloudfront.net\u001b[0m]",
        "rel-jpmc.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md23xy86zd5pwlf.cloudfront.net\u001b[0m]",
        "rel-legacy.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md14uytz5exmmjg.cloudfront.net\u001b[0m]",
        "rel-medicareproviders.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1sp2shjtk5n0z.cloudfront.net\u001b[0m]",
        "rel-newsletters.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p0hodav7b536.cloudfront.net\u001b[0m]",
        "rel-plans.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjz735gb4itzb.cloudfront.net\u001b[0m]",
        "rel-prudential.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2t3cnrbgxn7q8.cloudfront.net\u001b[0m]",
        "rel-saveourhealthcare.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3a7ailpr3nwet.cloudfront.net\u001b[0m]",
        "rel-socal.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md217pe0673pvgu.cloudfront.net\u001b[0m]",
        "rel-stateofct.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uwanu19au0fw.cloudfront.net\u001b[0m]",
        "resources.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wccayds629.execute-api.eu-west-1.amazonaws.com\u001b[0m]",
        "rlse.login.developer.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-cigna-test-1368082515.us-east-1.elb.amazonaws.com\u001b[0m]",
        "saveourhealthcare.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1kpzzdbee6ys8.cloudfront.net\u001b[0m]",
        "socal.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1e9951o9rack1.cloudfront.net\u001b[0m]",
        "stateofct.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3jdiqnf1csek4.cloudfront.net\u001b[0m]",
        "stateoftn.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2uwyx2ld01ah4.cloudfront.net\u001b[0m]",
        "t.universal-login.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-uni-login-cigna-test-846671016.us-east-1.elb.amazonaws.com\u001b[0m]",
        "uset-devin-reporting.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcigna-group.github.io\u001b[0m]",
        "usmed.mobconfig.test.digitaledge.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-usmed-mobconf-test-1871330332.us-east-1.elb.amazonaws.com\u001b[0m]",
        "v.login.my.cigna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-mycigna-test-2134914845.us-east-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "cigna.com",
        "version": 4,
        "generated_at": "2026-03-27T23:44:37.206Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 65,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 65,
            "deep_skipped_below_pool": 63
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "aep-pdp-challenger.sites.cigna.com",
                "cname": "d2uqjri3jj6fsh.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể là bucket S3\/CloudFront chưa được cấu hình, nhưng không chắc có thể claim trực tiếp từ AWS vì có thể thuộc quản lý của chủ sở hữu.",
                "llm_labeled_at": "2026-03-27T23:44:43.919Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "medicareproviders.cigna.com",
                "cname": "d1tgmpr4b4r7dm.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự, CNAME CloudFront với 404. Cấu hình thiếu sót nhưng không đủ bằng chứng cho thấy có thể chiếm quyền sở hữu (takeover) từ AWS.",
                "llm_labeled_at": "2026-03-27T23:44:43.919Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "aep-pdp-challenger.sites.cigna.com",
                "medicareproviders.cigna.com"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-27T23:44:43.919Z",
            "usage": {
                "prompt_tokens": 511,
                "completion_tokens": 198,
                "total_tokens": 709,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 383
            }
        }
    }
}