{
    "ok": true,
    "slug": "docusign.com-2026-03-30",
    "stats": {
        "subs": 746,
        "all": 746,
        "resolved": 441,
        "live": 327,
        "takeover": 33,
        "juicy": 25,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 2,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 1,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/docusign.com-2026-03-30",
    "takeover_candidates": [
        "a.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32marya-1323461286.us-west-2.elb.amazonaws.com\u001b[0m]",
        "brand.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "data.cloud.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md165r129x5gkdo.cloudfront.net\u001b[0m]",
        "data.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32musw2-alb-redirect-table-prod-gk5-1449551940.us-west-2.elb.amazonaws.com\u001b[0m]",
        "demo.stitch-api.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-gpl2skjc5b.execute-api.us-west-2.amazonaws.com\u001b[0m]",
        "demo.stitch-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-1665543873.us-west-2.elb.amazonaws.com\u001b[0m]",
        "dev.stitch-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-974936753.us-west-2.elb.amazonaws.com\u001b[0m]",
        "dxe-demo.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "dxe-stage.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "eloquatools.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkumamoto-2002.herokussl.com\u001b[0m]",
        "geo.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgeo-1040374038.us-west-2.elb.amazonaws.com\u001b[0m]",
        "gshlink.csm.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2p5bwynl9pmt6.cloudfront.net\u001b[0m]",
        "gsnlink.test.csm.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lc0hmtajjf42.cloudfront.net\u001b[0m]",
        "int.eis-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-1866940135.us-west-2.elb.amazonaws.com\u001b[0m]",
        "int.stitch-api.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-1rsc3yxcjc.execute-api.us-west-2.amazonaws.com\u001b[0m]",
        "jira.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign-1459311510.us-west-2.elb.amazonaws.com\u001b[0m]",
        "jiratest.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign-test-371396884.us-west-2.elb.amazonaws.com\u001b[0m]",
        "marketing.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmarketing-docusign-com.netlifyglobalcdn.com\u001b[0m]",
        "pki.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32musw2-alb-cdp-prod-prod-4yq-918418230.us-west-2.elb.amazonaws.com\u001b[0m]",
        "preview.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "privacy.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3k0qxi0s5jhp3.cloudfront.net\u001b[0m]",
        "rebrand.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "redirect.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mredirect-514973434.us-west-2.elb.amazonaws.com\u001b[0m]",
        "sandbox.eis-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-1368659948.us-west-2.elb.amazonaws.com\u001b[0m]",
        "sandbox.stitch-api.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-okx2mdla4e.execute-api.us-west-2.amazonaws.com\u001b[0m]",
        "stage.stitch-api.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-pgrms29b7k.execute-api.us-west-2.amazonaws.com\u001b[0m]",
        "stage.stitch-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-1543706332.us-west-2.elb.amazonaws.com\u001b[0m]",
        "stitch-api.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3jfm6qh843s2w.cloudfront.net\u001b[0m]",
        "stitch-dashboard.corp.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstitchdashboard3-loadbalancer-509144815.us-west-2.elb.amazonaws.com\u001b[0m]",
        "trial-d.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "trial-mtest.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "trial-s.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]",
        "trial.docusign.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdocusign.netlifyglobalcdn.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "docusign.com",
        "version": 5,
        "generated_at": "2026-03-30T02:33:51.241Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 2,
            "llm_review_pool": 2,
            "dropped_noise": 3,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "data.cloud.corp.docusign.com",
                "cname": "d165r129x5gkdo.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CloudFront lỗi 502 nhưng lỗi chung của AWS, không phải trang trống. Khó claim trực tiếp.",
                "llm_labeled_at": "2026-03-30T02:34:00.479Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/data.cloud.corp.docusign.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "rebrand.docusign.com",
                "cname": "proxy-ssl.webflow.com",
                "status": 404,
                "title": "404 - Page not found",
                "fingerprint": "webflow",
                "confidence": "high",
                "claim_score": 71,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_possible",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Webflow 404, subdomain có thể chưa được publish. Có khả năng claim nếu Webflow account chưa liên kết.",
                "llm_labeled_at": "2026-03-30T02:34:00.479Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "medium",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/rebrand.docusign.com\/",
                    "http_status": 404,
                    "title_snippet": "404 - Page not found",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            }
        ],
        "llm_review_pool": [
            {
                "host": "gshlink.csm.docusign.com",
                "cname": "d2p5bwynl9pmt6.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CloudFront 404 nhưng có thể là endpoint hợp lệ đã bị gỡ. Không có bằng chứng resource bị bỏ rơi.",
                "llm_labeled_at": "2026-03-30T02:34:00.480Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gsnlink.test.csm.docusign.com",
                "cname": "d1lc0hmtajjf42.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Tương tự, subdomain test với CloudFront 404. Có khả năng là môi trường test hợp lệ, không claim được.",
                "llm_labeled_at": "2026-03-30T02:34:00.480Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "data.cloud.corp.docusign.com",
                "rebrand.docusign.com",
                "gshlink.csm.docusign.com",
                "gsnlink.test.csm.docusign.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-30T02:34:00.480Z",
            "usage": {
                "prompt_tokens": 755,
                "completion_tokens": 293,
                "total_tokens": 1048,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 627
            }
        },
        "v5": {
            "processed_at": "2026-03-30T02:34:00.561Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "docusign.com-2026-03-30"
        }
    }
}