{
    "ok": true,
    "slug": "datadoghq.com-2026-03-29",
    "stats": {
        "subs": 205,
        "all": 205,
        "resolved": 171,
        "live": 166,
        "takeover": 102,
        "juicy": 106,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/datadoghq.com-2026-03-29",
    "takeover_candidates": [
        "agent-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlogs-intake-tcp-agent-shard0-1520909537.us-east-1.elb.amazonaws.com\u001b[0m]",
        "agent.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-metrics-agent-public-s0-d5246a188c35bb66.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "agent.mrf.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "api.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-api-public-s0-76e77bcc5291ad2a.elb.us-east-1.amazonaws.com\u001b[0m]",
        "app.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "appgate-1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "appgate-1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "appgate-2.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "appgate.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "apt.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md28vzhvul01my7.cloudfront.net\u001b[0m]",
        "aptssl.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md28vzhvul01my7.cloudfront.net\u001b[0m]",
        "blog.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3n52wggrrhuyp.cloudfront.net\u001b[0m]",
        "browser-http-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com\u001b[0m]",
        "build.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "build.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "chat.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbehavioral-woodland-7izg07l0rmahhz2gcxb4kfys.herokudns.com\u001b[0m]",
        "cla.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcla.datadoghq.com.herokudns.com\u001b[0m]",
        "code.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-traefik-traefika-efaa535fca-1057130670.us-east-1.elb.amazonaws.com\u001b[0m]",
        "datorama.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dd-ces.ad.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dd-corpsite.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dd-corpsite.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dd-ndes.ad.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "docs-staging.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vwoov4jcpn0t.cloudfront.net\u001b[0m]",
        "docs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md24im73ot8azv4.cloudfront.net\u001b[0m]",
        "druids.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mds4q9odtg7z52.cloudfront.net\u001b[0m]",
        "egencia-lab.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "egencia-prod.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "email.mentoring.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.recruiting.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "employee.store.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "engineering.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2hq5chirsc2qk.cloudfront.net\u001b[0m]",
        "ff-cdn.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "ff-cdn.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "fsn.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "fsn.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "functions-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-logs-intake-tcp-public-9649c6043cc045a3.elb.us-east-1.amazonaws.com\u001b[0m]",
        "go.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "helm.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdatadog.github.io\u001b[0m]",
        "help.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdatadog.zendesk.com\u001b[0m]",
        "install.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxrwpstquprzl.cloudfront.net\u001b[0m]",
        "intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-logs-intake-tcp-public-9649c6043cc045a3.elb.us-east-1.amazonaws.com\u001b[0m]",
        "integrations.otlp.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "integrations.otlp.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "inventory.store.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "ip-ranges.us3.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yssz0xg8mdv8.cloudfront.net\u001b[0m]",
        "ip-ranges.us5.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2fpyfjkbp2imj.cloudfront.net\u001b[0m]",
        "keys.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md32vjtp6zmbw5y.cloudfront.net\u001b[0m]",
        "labs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "lambda-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-logs-intake-tcp-public-9649c6043cc045a3.elb.us-east-1.amazonaws.com\u001b[0m]",
        "learning-assets.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dt33ow98xrcu.cloudfront.net\u001b[0m]",
        "login.labs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "login.labs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "logs.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "logs.mrf.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "looker-webhook.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "mcc9-metrodr.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "measureoss.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "measureoss.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "mentoring.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mexpoproto.web.app\u001b[0m]",
        "metrics.agent.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-metrics-agent-s0-7c551d28c9ca34fc.elb.us-east-1.amazonaws.com\u001b[0m]",
        "metrics.agent.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-metrics-agent-s1-56401ca284db905a.elb.us-east-1.amazonaws.com\u001b[0m]",
        "mrf.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "nessus-int-scanner-1.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-int-scanner-2.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-int-scanner-2.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-int-scanner-3.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-int-scanner-3.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-scanner-1.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-scanner-1.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-scanner-2.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-scanner-3.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "nessus-scanner.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "process.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m1352efbaf6dc8e7129ac2d5cc8541dd0-a468fbe7d7331b3a.elb.us-east-1.amazonaws.com\u001b[0m]",
        "profile.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-s0-2803722ca2b9cfa5.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "profile.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "public-trace-http-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-logs-http-p-trace-pub-s0-9e581401b92f539e.elb.us-east-1.amazonaws.com\u001b[0m]",
        "pypi.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpypi.datadoghq.com.s3-website-us-east-1.amazonaws.com\u001b[0m]",
        "rapdev-lab.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "rum-http-intake.logs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com\u001b[0m]",
        "sheepdog.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "sheepdog.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "store.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "streaming-corpsite-collector.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "studentpack.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstudentpack.datadoghq.com.herokudns.com\u001b[0m]",
        "subdomain.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "swag.store.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "synthetics.ap1.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-api-public-s0-1bf23a7462c24105.elb.ap-northeast-1.amazonaws.com\u001b[0m]",
        "synthetics.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-api-public-s1-aef5b3f1be1f4180.elb.us-east-1.amazonaws.com\u001b[0m]",
        "teachertoolbox.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "test.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "test.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "test2.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "u003edocs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "u003edocs.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "washpost.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "washpost.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "workshop.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s0-b894e1dde264f5ec.elb.us-east-1.amazonaws.com\u001b[0m]",
        "workshop.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ml4-web-public-s1-7109eb0b808a5bbd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "yum.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md24tfdc47ugio8.cloudfront.net\u001b[0m]",
        "yumssl.datadoghq.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md24tfdc47ugio8.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "datadoghq.com",
        "version": 4,
        "generated_at": "2026-03-29T15:49:10.695Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 0
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "docs-staging.datadoghq.com",
                "cname": "d2vwoov4jcpn0t.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 không đủ chứng tỏ tài nguyên bị bỏ hoang. Có thể là môi trường staging chưa cấu hình hoặc trang bị gỡ. Cần thêm bằng chứng về việc có thể claim tài khoản.",
                "llm_labeled_at": "2026-03-29T15:49:15.574Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "docs-staging.datadoghq.com"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-29T15:49:15.574Z",
            "usage": {
                "prompt_tokens": 396,
                "completion_tokens": 121,
                "total_tokens": 517,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 268
            }
        }
    }
}